Check the given CertPath against the root of trust during recovery

Bug: 73826459
Test: adb shell am instrument -w -e package \
com.android.server.locksettings.recoverablekeystore \
com.android.frameworks.servicestests/android.support.test.runner.AndroidJUnitRunner

Change-Id: I28893d815c57260c4d0f0d55d252bff5d34d4832