| Index: components/policy/core/common/cloud/policy_builder.h
 | 
| diff --git a/components/policy/core/common/cloud/policy_builder.h b/components/policy/core/common/cloud/policy_builder.h
 | 
| index 2298b3aebe2e794f8fbdfd2865a9572478c15909..20114c6fc7f307bfc344697299be618299c185e6 100644
 | 
| --- a/components/policy/core/common/cloud/policy_builder.h
 | 
| +++ b/components/policy/core/common/cloud/policy_builder.h
 | 
| @@ -61,6 +61,11 @@ class PolicyBuilder {
 | 
|    void SetDefaultSigningKey();
 | 
|    void UnsetSigningKey();
 | 
|  
 | 
| +  // Sets the default initial signing key - the resulting policy will be signed
 | 
| +  // by the default signing key, and will have that key set as the
 | 
| +  // new_public_key field, as if it were an initial key provision.
 | 
| +  void SetDefaultInitialSigningKey();
 | 
| +
 | 
|    scoped_ptr<crypto::RSAPrivateKey> GetNewSigningKey();
 | 
|    void SetDefaultNewSigningKey();
 | 
|    void UnsetNewSigningKey();
 | 
| @@ -79,6 +84,11 @@ class PolicyBuilder {
 | 
|    static scoped_ptr<crypto::RSAPrivateKey> CreateTestSigningKey();
 | 
|    static scoped_ptr<crypto::RSAPrivateKey> CreateTestOtherSigningKey();
 | 
|  
 | 
| +  // Verification signatures for the two hard-coded testing keys above. These
 | 
| +  // signatures are valid only for the kFakeDomain domain.
 | 
| +  static std::string GetTestSigningKeySignature();
 | 
| +  static std::string GetTestOtherSigningKeySignature();
 | 
| +
 | 
|   private:
 | 
|    // Produces |key|'s signature over |data| and stores it in |signature|.
 | 
|    void SignData(const std::string& data,
 | 
| 
 |