[automerger skipped] Allow only AID_ROOT to inject certificate am: e951685d -s ours am: 26fe60b0 -s ours

am skip reason: Change-Id If71c0171bc4347979e278752fc49877359f056b7 with SHA-1 e951685d is in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/DnsResolver/+/11882409

Change-Id: I7451506dd686558de9e352b7d378aebf59beb268