security: In KeyChain.getAnyCertificate, make the return type IdentityCertificate.