services/shell: Turn on sandboxing for mojo apps.

services/catalog/entry.h

Index: services/catalog/entry.h
diff --git a/services/catalog/entry.h b/services/catalog/entry.h
index 93d4a914a7c2d906ec33793c02ac98d4c034b0b0..1be1503419b7be5f0520230795e57a1df7cf6789 100644
--- a/services/catalog/entry.h
+++ b/services/catalog/entry.h
@@ -60,6 +60,9 @@ class Entry {
     return std::move(children_);
   }
 
+  bool privileged() const { return privileged_; }
+  void set_privileged(bool privileged) { privileged_ = privileged; }
+
  private:
   std::string name_;
   base::FilePath path_;
@@ -67,6 +70,7 @@ class Entry {
   std::string display_name_;
   shell::CapabilitySpec capabilities_;
   Entry* package_ = nullptr;
+  bool privileged_ = false;
   std::vector<std::unique_ptr<Entry>> children_;
 };