Merge "Don't offer crypto ops for public keys of trusted cert entries." into mnc-dev