Device robot refresh token integrity validation.

chrome/browser/policy/proto/cloud/device_management_backend.proto

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 syntax = "proto2";
 
 option optimize_for = LITE_RUNTIME;
 
 package enterprise_management;
 
@@ skipping 220 matching lines @@
 
   // Indicates if the the server cannot find a valid serial number for the
   // device.  If this flag is set, the device should send the valid serial
   // number with a device policy fetch request.  Note that this only
   // applies to device policy.
   optional bool valid_serial_number_missing = 10;
 
   // Indicates which public account or extension/plug-in this policy data is
   // for. See PolicyFetchRequest.settings_entity_id for more details.
   optional string settings_entity_id = 11;
+
+  // Indicates the identity the device service account is associated with.
+  // This is only sent as part of device policy fetch.
+  optional string service_account_identity = 12;
 }
 
 message PolicyFetchResponse {
   // Since a single policy request may ask for multiple policies, we
   // provide separate error code for each individual policy fetch.
 
   // We will use standard HTTP Status Code as error code.
   optional int32 error_code = 1;
 
   // Human readable error message for customer support purpose.
@@ skipping 307 matching lines @@
 
   // Auto-enrollment detection response.
   optional DeviceAutoEnrollmentResponse auto_enrollment_response = 8;
 
   // EMCert upload response.
   optional DeviceCertUploadResponse cert_upload_response = 9;
 
   // Response to OAuth2 authorization code request.
   optional DeviceServiceApiAccessResponse service_api_access_response = 10;
 }