Require extractable=false for KDF import

components/webcrypto/status.cc

Index: components/webcrypto/status.cc
diff --git a/components/webcrypto/status.cc b/components/webcrypto/status.cc
index f0d25ff435ecdceeece001934160b511b2607b43..6ba4cbfccde1d8b524c91a60ad9687261c6f9866 100644
--- a/components/webcrypto/status.cc
+++ b/components/webcrypto/status.cc
@@ -362,6 +362,11 @@ Status Status::ErrorPbkdf2Iterations0() {
                 "PBKDF2 requires iterations > 0");
 }
 
+Status Status::ErrorImportExtractableKdfKey() {
+  return Status(blink::WebCryptoErrorTypeSyntax,
+                "KDF keys must set extractable=false");
+}
+
 Status::Status(blink::WebCryptoErrorType error_type,
                const std::string& error_details_utf8)
     : type_(TYPE_ERROR),