platformKeys: Add policy and corporate key tagging.

chrome/test/data/extensions/api_test/platform_keys/basic.js

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 'use strict';
 
 var systemTokenEnabled = (location.search.indexOf("systemTokenEnabled") != -1);
 var selectedTestSuite = location.hash.slice(1);
 console.log('[SELECTED TEST SUITE] ' + selectedTestSuite +
             ', systemTokenEnable ' + systemTokenEnabled);
@@ skipping 571 matching lines @@
   },
 
   managedProfile: function() {
     var tests = [
       // If the profile is managed, the user cannot grant permissions for any
       // certificates.
       testInteractiveSelectNoCerts
     ];
     chrome.test.runTests(tests);
   },
+
+  corporateKeyWithoutPermissionTests: function() {
+    var tests = [
+      // Directly trying to sign must fail
+      testSignClient1Fails,
+
+      // Interactively selecting must not show any cert to the user.
+      testInteractiveSelectNoCerts,
+    ];
+    chrome.test.runTests(tests);
+  },
+
+  corporateKeyWithPermissionTests: function() {
+    var tests = [
+      // The extension has non-interactive access to all corporate keys, even
+      // without previous additional consent of the user.
+      testSignSha1Client1,
+
+      // Interactively selecting for client_1 will work as well.
+      testInteractiveSelectClient1,
+    ];
+    chrome.test.runTests(tests);
+  },
+
+  policyDoesGrantAccessToNonCorporateKey: function() {
+    // The permission from policy must not affect usage of non-corproate keys.
+    var tests = [
+      // Attempts to sign must fail.
+      testSignClient1Fails,
+
+      // Interactive selection must not prompt the user and not return any
+      // certificate.
+      testInteractiveSelectNoCerts,
+    ];
+    chrome.test.runTests(tests);
+  },
+
 };
 
 setUp(testSuites[selectedTestSuite]);