Review permissions manager and certdb source

In order to estimate time for #2949 (moved) and #2950 (closed), we need to review the source code of the relevant components to see how hard it is to make them exist only in memory. I think it is simple for the permissions manager, but unknown for the intermediate cert store.