MD Settings: Certificate manager, respect export/edit/delete restrictions.

chrome/browser/resources/settings/certificate_manager_page/certificate_subentry.html

 <link rel="import" href="chrome://resources/html/polymer.html">
 <link rel="import" href="chrome://md-settings/certificate_manager_page/certificates_browser_proxy.html">
 <link rel="import" href="chrome://resources/cr_elements/cr_expand_button/cr_expand_button.html">
 <link rel="import" href="chrome://resources/polymer/v1_0/iron-dropdown/iron-dropdown.html">
 <link rel="import" href="chrome://resources/polymer/v1_0/iron-icons/iron-icons.html">
 <link rel="import" href="chrome://resources/polymer/v1_0/paper-icon-button/paper-icon-button.html">
 <link rel="import" href="chrome://resources/polymer/v1_0/paper-item/paper-item.html">
 <link rel="import" href="chrome://md-settings/settings_shared_css.html">
 
 <dom-module id="settings-certificate-subentry">
@@ skipping 33 matching lines @@
       <paper-icon-button id="dots" icon="more-vert" toggles
           active="{{menuOpened}}"></paper-icon-button>
       <!-- TODO(dpapad): Figure out RTL for this menu -->
       <template is="dom-if" if="[[menuOpened]]">
         <iron-dropdown vertical-align="top" horizontal-align="right"
             opened="{{menuOpened}}">
           <div class="dropdown-content">
             <paper-item id="view" on-tap="onViewTap_">
               $i18n{certificateManagerView}
             </paper-item>
-            <paper-item id="edit" hidden$="[[!canEdit_(certificateType)]]"
+            <paper-item id="edit" hidden$="[[!canEdit_(certificateType, model)]]"
                 on-tap="onEditTap_">
               $i18n{certificateManagerEdit}
             </paper-item>
-            <paper-item id="export" on-tap="onExportTap_">
+            <paper-item id="export"
+                hidden$="[[!canExport_(certificateType, model)]]"
+                on-tap="onExportTap_">
               $i18n{certificateManagerExport}
             </paper-item>
-            <paper-item id="delete" hidden$="[[model.readonly]]"
+            <paper-item id="delete" hidden$="[[!canDelete_(model)]]"
                 on-tap="onDeleteTap_">
               $i18n{certificateManagerDelete}
             </paper-item>
           </div>
         </iron-dropdown>
       </template>
     <div>
   </template>
   <script src="certificate_subentry.js"></script>
 </dom-module>