[login_manager] Start chrome with opencryptoki flag if user enables the lab

session_manager_setup.sh

 #!/bin/sh
 
 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # Set up to start the X server ASAP, then let the startup run in the
 # background while we set up other stuff.
 XAUTH_FILE="/var/run/chromelogin.auth"
 MCOOKIE=$(head -c 8 /dev/urandom | openssl md5)  # speed this up?
@@ skipping 233 matching lines @@
 # Look to see if there are touch devices.
 TOUCH_LIST_PATH=/etc/touch-devices
 TOUCH_DEVICES=
 if [ -s $TOUCH_LIST_PATH ] ; then
   DEVICE_LIST="$(cat $TOUCH_LIST_PATH)"
   if [ "${DEVICE_LIST%%[,0-9]*}" = "" ] ; then
     TOUCH_DEVICES="--touch-devices='$DEVICE_LIST'"
   fi
 fi
 
+# TODO(crosbug.com/14277): Make this a default.
+PKCS11_FLAGS=
+if [ -r "/home/chronos/.cryptohome-init-pkcs11" ]; then
+  PKCS11_FLAGS=--load-opencryptoki
+fi
+
 # Use OpenGL acceleration flags except on ARM
 if [ "$(uname -m)" != "armv7l" ] ; then
   ACCELERATED_FLAGS="--enable-accelerated-layers"
 else
   ACCELERATED_FLAGS="--use-gl=egl"
 fi
 
 # If screensaver use isn't disabled, set screensaver.
 SCREENSAVERS_PATH=/usr/share/chromeos-assets/screensavers
 SCREENSAVER_FLAG=
@@ skipping 64 matching lines @@
             --parallel-auth \
             --scroll-pixels=4 \
             --reload-killed-tabs \
             --user-data-dir="$DATA_DIR" \
             "$REGISTER_PLUGINS" \
             "$TOUCH_DEVICES" \
             ${ACCELERATED_FLAGS} \
             ${FLASH_FLAGS} \
             ${SCREENSAVER_FLAG} \
             ${SKIP_OOBE} \
+            ${PKCS11_FLAGS} \
 -- "$WM_SCRIPT"