Expose signing key from cloud policy stores

components/policy/core/common/cloud/cloud_policy_store.h

Index: components/policy/core/common/cloud/cloud_policy_store.h
diff --git a/components/policy/core/common/cloud/cloud_policy_store.h b/components/policy/core/common/cloud/cloud_policy_store.h
index e91b80f1582592eece6388d9e10cc9d01ea5ce2f..621398706c24e6e1f4eb156d7e94731beb7d2334 100644
--- a/components/policy/core/common/cloud/cloud_policy_store.h
+++ b/components/policy/core/common/cloud/cloud_policy_store.h
@@ -8,6 +8,7 @@
 #include <stdint.h>
 
 #include <memory>
+#include <string>
 
 #include "base/macros.h"
 #include "base/memory/weak_ptr.h"
@@ -83,6 +84,8 @@ class POLICY_EXPORT CloudPolicyStore {
   CloudPolicyValidatorBase::Status validation_status() const {
     return validation_status_;
   }
+  std::string owning_domain() const { return owning_domain_; }

[Thiemo Nagel, 2016/11/10 19:26:37]

Nit: What about using const std::string& return type instead?  It should be
faster.

[emaxx, 2016/11/10 21:07:19]

Done.

+  std::string public_key() const { return public_key_; }
 
   // Store a new policy blob. Pending load/store operations will be canceled.
   // The store operation may proceed asynchronously and observers are notified
@@ -150,6 +153,15 @@ class POLICY_EXPORT CloudPolicyStore {
   // The invalidation version of the last policy stored.
   int64_t invalidation_version_;
 
+  // The owning domain that corresponds to the policies stored by the store.
+  // Empty value means that there's no owning domain or it is yet unknown.
+  std::string owning_domain_;
+
+  // The public part of signing key that is used by the currently stored
+  // policies.
+  // Empty value means that the public key is yet unknown.

[Thiemo Nagel, 2016/11/10 19:26:37]

Nit: Suggest to wrap that into the previous line.

[emaxx, 2016/11/10 21:07:19]

Done.

+  std::string public_key_;
+
  private:
   // Whether the store has completed asynchronous initialization, which is
   // triggered by calling Load().