Merge "Add ROLLBACK past signing cert capability." into pi-dev
am: 0594af6dc3

Change-Id: I4057024e5a9369f0dc9c5e3ada14d338202fb1c6