Don't pass domain and verification key to validation when not required

chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc

Index: chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc
diff --git a/chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc b/chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc
index ba6b031700c80854607b55b885fae2155ea1c481..0f600faa3585e00c74a81d6c712766d0195589fb 100644
--- a/chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc
+++ b/chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc
@@ -59,10 +59,9 @@ void DeviceCloudPolicyStoreChromeOS::Store(
 
   std::unique_ptr<DeviceCloudPolicyValidator> validator(
       CreateValidator(policy));
-  validator->ValidateSignature(public_key->as_string(),
-                               GetPolicyVerificationKey(),
-                               install_attributes_->GetDomain(),
-                               true);
+  validator->ValidateSignatureAllowingRotation(
+      public_key->as_string(), GetPolicyVerificationKey(),
+      install_attributes_->GetDomain());
   validator->ValidateAgainstCurrentPolicy(
       device_settings_service_->policy_data(),
       CloudPolicyValidatorBase::TIMESTAMP_FULLY_VALIDATED,