Review permissions manager and certdb source
In order to estimate time for #2949 (moved) and #2950 (closed), we need to review the source code of the relevant components to see how hard it is to make them exist only in memory. I think it is simple for the permissions manager, but unknown for the intermediate cert store.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information