- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
      as a preparation to fix bugs in the interaction between p11-kit-trust and
      Mozilla applications, such as Firefox, Thunderbird etc.
    - Changed update-ca-trust to add comments to extracted PEM format files.
    - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
    - Set attribute modifiable: false
    - Require p11-kit 0.23.2-3