See SEC-28: Currently Fuchsia is getting its root certs via Dart.
With this CL, the certificates instead are rolled alongside BoringSSL
and included in the image from this repository.

Change-Id: I2c2152de5420505c0800a080fcf93237614c223e