Add a lock to the managed user settings page and require authentication for unlocking.

chrome/common/pref_names.cc

Index: chrome/common/pref_names.cc
diff --git a/chrome/common/pref_names.cc b/chrome/common/pref_names.cc
index fb670a86030e71f466bc3614642b8b6f1b38f264..f26418ed15b10c16296e0d372418c724719a4d34 100644
--- a/chrome/common/pref_names.cc
+++ b/chrome/common/pref_names.cc
@@ -2069,6 +2069,13 @@ const char kManagedNotificationsBlockedForUrls[] =
 const char kManagedAutoSelectCertificateForUrls[] =
     "profile.managed_auto_select_certificate_for_urls";
 
+// This preference is used to store the hash of a password of the custodian of
+// a managed user. It allows to unlock options which should be not available to
+// the managed user. The salt preference is used to derive the hash from the
+// password.
+const char kManagedModeLocalPassphrase[] = "managed_mode.passphrase";
+const char kManagedModeLocalSalt[] = "managed_mode.salt";
+
 // Set to true if the user created a login item so we should not modify it when
 // uninstalling background apps.
 const char kUserCreatedLoginItem[] = "background_mode.user_created_login_item";