Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/common/pref_names.cc

Index: chrome/common/pref_names.cc
diff --git a/chrome/common/pref_names.cc b/chrome/common/pref_names.cc
index 55b7b85c0cdd316af07dab9818bd43e080cbe5fb..2df570f715583a2203a8b6f05093cf43fdcca0bd 100644
--- a/chrome/common/pref_names.cc
+++ b/chrome/common/pref_names.cc
@@ -864,6 +864,13 @@ const char kPowerPresentationIdleDelayFactor[] =
 // The URL from which the Terms of Service can be downloaded. The value is only
 // honored for public accounts.
 const char kTermsOfServiceURL[] = "terms_of_service.url";
+
+// Indicates that the Profile has made navigations that used a certificate
+// installed by the system administrator. If that is true then the local cache
+// of remote data is tainted (e.g. shared scripts), and future navigations
+// show a warning indicating that the organization may track the browsing
+// session.
+const char kUsedPolicyCertificatesOnce[] = "used_policy_certificates_once";
 #endif  // defined(OS_CHROMEOS)
 
 // The disabled messages in IPC logging.