Merge "Check for downgrade and signature of outer .apex certificate" into sc-dev