Merge "Unhide RecoveryController#getRootCertificates()" into pi-dev