Merge "Require signing cert history certs to be unique." into pi-dev