Refactor mac signing scripts for development workflow

chrome/installer/mac/variables.sh

Index: chrome/installer/mac/variables.sh
diff --git a/chrome/installer/mac/variables.sh b/chrome/installer/mac/variables.sh
new file mode 100644
index 0000000000000000000000000000000000000000..951d853c4b4b96bc385d98b221a3a744f4ed4576
--- /dev/null
+++ b/chrome/installer/mac/variables.sh
@@ -0,0 +1,12 @@
+# Copyright 2017 The Chromium Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+enforcement_flags_app="restrict"

[Mark Mentovai, 2017/04/25 02:02:25]

Maybe provide a little rationale for each of these three: what _app is used for
and why we can’t use “library” on it, for example.

[Greg K, 2017/04/25 18:45:21]

Done.

+enforcement_flags_helpers="${enforcement_flags_app},library"
+enforcement_flags_tools="${enforcement_flags_helpers},kill"
+
+requirement_suffix="\
+and (certificate leaf = H\"85cee8254216185620ddc8851c7a9fc4dfe120ef\" or \
+certificate leaf = H\"c9a99324ca3fcb23dbcc36bd5fd4f9753305130a\") \
+"