Add migration from CaCert NSS nicknames to PEM.

chrome/browser/chromeos/chrome_browser_main_chromeos.cc

Index: chrome/browser/chromeos/chrome_browser_main_chromeos.cc
diff --git a/chrome/browser/chromeos/chrome_browser_main_chromeos.cc b/chrome/browser/chromeos/chrome_browser_main_chromeos.cc
index eb78f820371929d372f3a0f0884c6d53f3521703..40e50f165657c11bf1f941546c7de1f92cf417dc 100644
--- a/chrome/browser/chromeos/chrome_browser_main_chromeos.cc
+++ b/chrome/browser/chromeos/chrome_browser_main_chromeos.cc
@@ -21,6 +21,7 @@
 #include "base/prefs/pref_service.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_split.h"
+#include "base/threading/worker_pool.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/browser_process_platform_part_chromeos.h"
 #include "chrome/browser/chrome_notification_types.h"
@@ -278,7 +279,8 @@ class DBusServices {
 
     LoginState::Initialize();
     CryptohomeLibrary::Initialize();
-    CertLoader::Initialize();
+    CertLoader::Initialize(
+        base::WorkerPool::GetTaskRunner(true /* task is slow */));
 
     // This function and SystemKeyEventListener use InputMethodManager.
     chromeos::input_method::Initialize(