Merge "Add new cert_pin_failure tag that can be used in user-consent filtering." into klp-dev