When using

package-builder

are the certificate pins specified with

-cert_pins

related to the Fleet certificate or the Notary certificate?

Notary doesn't rely on secure transport but signed metadata (https://theupdateframework.github.io/overview.html)