Don't reject server and CA certs during device ONC validation

chromeos/network/onc/onc_validator.cc

Index: chromeos/network/onc/onc_validator.cc
diff --git a/chromeos/network/onc/onc_validator.cc b/chromeos/network/onc/onc_validator.cc
index cd83e3f496d6affd6af298c300b6278e100b789a..d4fc4502f3c2a7bdd1082acf9055b329c18d76e3 100644
--- a/chromeos/network/onc/onc_validator.cc
+++ b/chromeos/network/onc/onc_validator.cc
@@ -973,13 +973,6 @@ bool Validator::ValidateCertificate(base::DictionaryValue* result) {
 
   std::string type;
   result->GetStringWithoutPathExpansion(kType, &type);
-  if (onc_source_ == ::onc::ONC_SOURCE_DEVICE_POLICY &&
-      (type == kServer || type == kAuthority)) {
-    error_or_warning_found_ = true;
-    LOG(ERROR) << MessageHeader() << "Server and authority certificates are "
-               << "prohibited in ONC device policies.";
-    return false;
-  }
 
   if (!CheckGuidIsUniqueAndAddToSet(*result, kGUID, &certificate_guids_))
     return false;