tree b2e1147db251ade37046ea6a48a29c394e4ca4ca
parent 6b48791c8043284fd59e83f033f677cece497481
author Dan Cashman <dcashman@google.com> 1522462958 -0700
committer Daniel Cashman <dcashman@google.com> 1523021737 +0000

Add ROLLBACK past signing cert capability.

Add a new capability that may be granted to past signing certificates
after changing to a new signing certificate that will allow applications
to go back to a previous signing certificate.  This capability is
intended to not be granted, but may be added later in the event that
a signing certificate change caused undesirable behavior.

(cherry-pick of commit: 26f734ffa011f6f22e5f83a9a80b877ddcc0c10a)
Bug: 73927694
Test: bazel test ...
Change-Id: Ic837ec66a97865ce941b202093e9bbe26fcfba90
Merged-In: Ic837ec66a97865ce941b202093e9bbe26fcfba90