CDD: Add recommendations for Verified Boot

Android Verified Boot or AVB (aka Verified Boot 2.0) is added to
Android 8.0, replacing the old Verified Boot feature and improving
security including the rollback prevention feature.

AVB requires adding a new disk partition, so can only be applied to
new device launches. However we're adding recommendations to support
these new features and also highlighting that there is an open-source
implementation that can be used to support the features as Android
Verified Boot would allow better integrity of the Android security model
that app developers would rely on.

Bug: 33676518
Change-Id: I6ff469ae61387038094a71bef0fa82b6455d1308
1 file changed