am 29ea81eb: am 4a84a13e: am a5f534df: use frozensets to represent APK cert sets

* commit '29ea81eb977699a2b026f08d13f213a7d216cb7e':
  use frozensets to represent APK cert sets