Merge "Allow specifying "platform" as cert for default permissions" into main