Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/common/pref_names.cc

Index: chrome/common/pref_names.cc
diff --git a/chrome/common/pref_names.cc b/chrome/common/pref_names.cc
index d450728684ab2de20f66e98198962a3517b21590..3c9a004659fe91e35b58c4ebfcce20e81e4abcea 100644
--- a/chrome/common/pref_names.cc
+++ b/chrome/common/pref_names.cc
@@ -864,6 +864,13 @@ const char kPowerPresentationIdleDelayFactor[] =
 // The URL from which the Terms of Service can be downloaded. The value is only
 // honored for public accounts.
 const char kTermsOfServiceURL[] = "terms_of_service.url";
+
+// Indicates that the Profile has made navigations that used a certificate
+// installed by the system administrator. If that is true then the local cache
+// of remote data is tainted (e.g. shared scripts), and future navigations
+// show a warning indicating that the organization may track the browsing
+// session.
+const char kUsedPolicyCertificatesOnce[] = "used_policy_certificates_once";
 #endif  // defined(OS_CHROMEOS)
 
 // The disabled messages in IPC logging.