Refactor client cert private key handling.

net/cert/cert_database_android.cc

Index: net/cert/cert_database_android.cc
diff --git a/net/cert/cert_database_android.cc b/net/cert/cert_database_android.cc
index 8cde45e20fcbd1c4fa0a92bb070106544c366351..5631f7cfa42c23992d1df7b5dcbc701d969682f9 100644
--- a/net/cert/cert_database_android.cc
+++ b/net/cert/cert_database_android.cc
@@ -7,7 +7,6 @@
 #include "base/logging.h"
 #include "base/observer_list_threadsafe.h"
 #include "net/base/net_errors.h"
-#include "net/ssl/openssl_client_key_store.h"
 
 namespace net {
 
@@ -19,12 +18,6 @@ CertDatabase::~CertDatabase() {}
 
 void CertDatabase::OnAndroidKeyStoreChanged() {
   NotifyObserversCertDBChanged();
-  // Dump the OpenSSLClientKeyStore to drop references to now disconnected
-  // PrivateKeys stored in the in-memory key store. Note: this assumes that
-  // every SSLClientAuthCache is dumped as part of notifying
-  // OnCertDBChanged. Otherwise client auth decisions will be silently converted
-  // to no-certificate decisions. See https://crbug.com/382696
-  OpenSSLClientKeyStore::GetInstance()->Flush();
 }
 
 void CertDatabase::OnAndroidKeyChainChanged() {