Make NSSCertDatabase::ListCerts work async on a worker thread.

net/cert/nss_profile_filter_chromeos.cc

Index: net/cert/nss_profile_filter_chromeos.cc
diff --git a/net/cert/nss_profile_filter_chromeos.cc b/net/cert/nss_profile_filter_chromeos.cc
index 48718174e8b37a4f0626c95fce7340034e795bd5..afb7e025b1370c26992c9084dd9bbeb128c33f11 100644
--- a/net/cert/nss_profile_filter_chromeos.cc
+++ b/net/cert/nss_profile_filter_chromeos.cc
@@ -4,9 +4,8 @@
 
 #include "net/cert/nss_profile_filter_chromeos.h"
 
-#include "base/bind.h"
-#include "base/callback.h"
 #include "base/strings/stringprintf.h"
+#include "net/cert/x509_certificate.h"
 
 namespace net {
 
@@ -93,21 +92,23 @@ bool NSSProfileFilterChromeOS::IsCertAllowed(
 }
 
 NSSProfileFilterChromeOS::CertNotAllowedForProfilePredicate::
-    CertNotAllowedForProfilePredicate(const NSSProfileFilterChromeOS& filter)
+    CertNotAllowedForProfilePredicate(
+        const scoped_refptr<NSSProfileFilterChromeOS>& filter)
     : filter_(filter) {}
 
 bool NSSProfileFilterChromeOS::CertNotAllowedForProfilePredicate::operator()(
     const scoped_refptr<X509Certificate>& cert) const {
-  return !filter_.IsCertAllowed(cert);
+  return !filter_->IsCertAllowed(cert);
 }
 
 NSSProfileFilterChromeOS::ModuleNotAllowedForProfilePredicate::
-    ModuleNotAllowedForProfilePredicate(const NSSProfileFilterChromeOS& filter)
+    ModuleNotAllowedForProfilePredicate(
+        const scoped_refptr<NSSProfileFilterChromeOS>& filter)
     : filter_(filter) {}
 
 bool NSSProfileFilterChromeOS::ModuleNotAllowedForProfilePredicate::operator()(
     const scoped_refptr<CryptoModule>& module) const {
-  return !filter_.IsModuleAllowed(module->os_module_handle());
+  return !filter_->IsModuleAllowed(module->os_module_handle());
 }
 
 }  // namespace net