Refactor client cert private key handling.

net/ssl/ssl_client_auth_cache.h

Index: net/ssl/ssl_client_auth_cache.h
diff --git a/net/ssl/ssl_client_auth_cache.h b/net/ssl/ssl_client_auth_cache.h
index 51b496f492c7391ec2d81d85b78d908b19570395..6486967ec48ab9f67f9583b12d883829279075c6 100644
--- a/net/ssl/ssl_client_auth_cache.h
+++ b/net/ssl/ssl_client_auth_cache.h
@@ -46,8 +46,8 @@ class NET_EXPORT_PRIVATE SSLClientAuthCache : public CertDatabase::Observer {
   // overwritten. A NULL |client_cert| indicates a preference that no client
   // certificate should be sent to |server|.
   void Add(const HostPortPair& server,
-           X509Certificate* client_cert,
-           SSLPrivateKey* private_key);
+           scoped_refptr<X509Certificate> client_cert,
+           scoped_refptr<SSLPrivateKey> private_key);
 
   // Remove the client certificate for |server| from the cache, if one exists.
   void Remove(const HostPortPair& server);