Provide a Capability to Restore a Root Certificate to Its As-Installed NSS State

[WilsonKathleen]

Feature Request:
If a user modifies the trust for a root certificate, there is currently no way for them to know what the default trust bit settings are for the root cert. When such a cert is updated in NSS and the update is installed in the user's configuration via an update to Mozilla's product (e.g. Firefox), the certificate update will be ignored.

The feature request is to add the ability to restore a root certificate to the default settings, i.e. its as-installed by NSS state and eliminate any copies of that root cert in the user's db.

Reference bug: https://bugzilla.mozilla.org/show_bug.cgi?id=558222