RefCounted types should not have public destructors, chromeos edition

chrome/browser/chromeos/login/signed_settings.h

Index: chrome/browser/chromeos/login/signed_settings.h
diff --git a/chrome/browser/chromeos/login/signed_settings.h b/chrome/browser/chromeos/login/signed_settings.h
index d9f7dd9d252cd43006b9079f7f779e01c47a9b0d..a1604630389a90bc74278232eb68a9ae2788c441 100644
--- a/chrome/browser/chromeos/login/signed_settings.h
+++ b/chrome/browser/chromeos/login/signed_settings.h
@@ -51,7 +51,6 @@ class SignedSettings : public base::RefCountedThreadSafe<SignedSettings>,
   };
 
   SignedSettings();
-  virtual ~SignedSettings();
 
   // These are both "policy" operations, and only one instance of
   // one type can be in flight at a time.
@@ -74,6 +73,8 @@ class SignedSettings : public base::RefCountedThreadSafe<SignedSettings>,
                                const std::vector<uint8>& payload) = 0;
 
  protected:
+  virtual ~SignedSettings();
+
   static bool PolicyIsSane(
       const enterprise_management::PolicyFetchResponse& value,
       enterprise_management::PolicyData* poldata);
@@ -83,6 +84,7 @@ class SignedSettings : public base::RefCountedThreadSafe<SignedSettings>,
   OwnershipService* service_;
 
  private:
+  friend class base::RefCountedThreadSafe<SignedSettings>;
   friend class SignedSettingsTest;
   friend class SignedSettingsHelperTest;