Allow trusted brokers to restrict connections for spawned applications to whitelisted applications …

mojo/shell/test.mojom

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 module mojo.shell;
 
 interface TestService {
   Test(string test_string) => ();
 };
 
 interface TestA {
   CallB();
   CallCFromB();
 };
 
 interface TestB {
   B() => ();
   CallC() => ();
 };
 
 interface TestC {
   C() => ();
 };
+
+// The following two interfaces are implemented by the application
+// mojo:restricted. Two applications are started by a broker that connect to
+// mojo:restricted, one is limited by the broker to only see Exposed while the

[jam, 2015/07/22 19:47:40]

nit: update comment to match names below

+// other can see both Exposed and Restricted.
+interface Safe {
+  SafeMethod();
+};
+
+interface Unsafe {
+  UnsafeMethod();
+};
+
+interface Driver {
+  Run();
+};