Switch from security/ca_root_nss to base system certificate store. Disable obsolete TPM 1.2 support. PR: 257995, 260723, 263107, 263131 Exp-run by: antoine