*WIP* Store NSS slots per profile. Move keygen to chrome.

chrome/third_party/mozilla_security_manager/nsNSSCertHelper.cpp

 /* ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
  *
  * Software distributed under the License is distributed on an "AS IS" basis,
  * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
@@ skipping 1029 matching lines @@
             spki->subjectPublicKey.data, spki->subjectPublicKey.len);
         break;
     }
     SECKEY_DestroyPublicKey(key);
   }
   return rv;
 }
 
 net::CertType GetCertType(CERTCertificate *cert) {
   CERTCertTrust trust = {0};
+  // XXX should use NSSCertDatabase to get trust for proper profile slot?
   CERT_GetCertTrust(cert, &trust);
 
   unsigned all_flags = trust.sslFlags | trust.emailFlags |
       trust.objectSigningFlags;
 
   if (cert->nickname && (all_flags & CERTDB_USER))
     return net::USER_CERT;
   if ((all_flags & CERTDB_VALID_CA) || CERT_IsCACert(cert, NULL))
     return net::CA_CERT;
   // TODO(mattm): http://crbug.com/128633.
   if (trust.sslFlags & CERTDB_TERMINAL_RECORD)
     return net::SERVER_CERT;
   return net::OTHER_CERT;
 }
 
 }  // namespace mozilla_security_manager