vendor/google/keys.conf

[@TANGO]
ALL : device/google/crosshatch-sepolicy/vendor/google/certs/tango_release.x509.pem

# Release builds of Android should not trust development builds of Tango.
# Unfortnately the infrastructure requires a certificate for each build variant,
# so switch to a bogus, unused cert for user builds.
[@TANGO_DEV]
ENG         : device/google/crosshatch-sepolicy/vendor/google/certs/tango.x509.pem
USERDEBUG   : device/google/crosshatch-sepolicy/vendor/google/certs/tango.x509.pem
USER        : device/google/crosshatch-sepolicy/vendor/google/certs/tango_userdev.x509.pem

[@GOOGLE]
ALL : device/google/crosshatch-sepolicy/vendor/google/certs/app.x509.pem

[@EASEL]
ALL : device/google/crosshatch-sepolicy/vendor/google/certs/easel.x509.pem