NOTE:

Most people will not need this plugin. I now recommend using RemoveUserCertificates in your extensibility configuration, as described in the documentation: Extensibility configurations JSON schema

-----

If you've ever submitted your app to Google Play, and you see an error in the Pre-launch report: 

Your app accepts user certificates when verifying secure connections.

Your app's Network Security Configuration allows the use of user-specified certificates. This could allow eavesdroppers to intercept data sent by your app, or to modify data in transit.

Consider nesting the trust-anchors element that allows user certificates inside a debug-overrides element to make sure they are only available when android:debuggable is set to true.

This plugin will remove the <certificate> element from the network_security_config.xml file in the APK.