Require extractable=false for KDF import

third_party/WebKit/LayoutTests/crypto/subtle/hkdf/importKey-failures.html

Index: third_party/WebKit/LayoutTests/crypto/subtle/hkdf/importKey-failures.html
diff --git a/third_party/WebKit/LayoutTests/crypto/subtle/hkdf/importKey-failures.html b/third_party/WebKit/LayoutTests/crypto/subtle/hkdf/importKey-failures.html
index b010c4de4b49250ffe5a85b57e5a0ae8cf9cc5f5..3dc607506800711ea696c2910e895aaad9fb8022 100644
--- a/third_party/WebKit/LayoutTests/crypto/subtle/hkdf/importKey-failures.html
+++ b/third_party/WebKit/LayoutTests/crypto/subtle/hkdf/importKey-failures.html
@@ -13,7 +13,7 @@ description("Test inputs to HKDF importKey()");
 
 jsTestIsAsync = true;
 
-var extractable = true;
+var extractable = false;
 rawBytes = new Uint8Array([1, 2]);
 
 var p = Promise.resolve(null);
@@ -42,6 +42,11 @@ p.then(function() {
     return crypto.subtle.importKey("raw", rawBytes, "HKDF", extractable, []);
 }).then(failAndFinishJSTest, function(result) {
     logError(result);
+
+    debug("\nimportKey() with extractable=true ...");
+    return crypto.subtle.importKey("raw", rawBytes, "HKDF", true, ['deriveKey']);
+}).then(failAndFinishJSTest, function(result) {
+    logError(result);
 }).then(finishJSTest, failAndFinishJSTest);
 
 </script>