services/shell: Turn on sandboxing for mojo apps.

services/catalog/entry.cc

Index: services/catalog/entry.cc
diff --git a/services/catalog/entry.cc b/services/catalog/entry.cc
index 4cca6c3c2a76fe2649ffeef3fb24f42d48f6ad46..7da6b90956607eb5d25ee3817402221c2c83d8a3 100644
--- a/services/catalog/entry.cc
+++ b/services/catalog/entry.cc
@@ -245,6 +245,13 @@ std::unique_ptr<Entry> Entry::Deserialize(const base::DictionaryValue& value) {
     }
   }
 
+  // Privileged?
+  bool privileged = false;
+  if (value.HasKey(Store::kPrivilegedKey) &&
+      value.GetBoolean(Store::kPrivilegedKey, &privileged)) {
+    entry->set_privileged(privileged);
+  }
+
   return entry;
 }
 
@@ -279,6 +286,7 @@ shell::mojom::ResolveResultPtr
   result->qualifier = input.qualifier();
   result->capabilities = input.capabilities();
   result->package_path = package.path();
+  result->privileged = input.privileged();
   return result;
 }