Enable policy-imported root CA certificates for kiosk and AD sessions

chrome/browser/chromeos/policy/user_network_configuration_updater_factory.h

Index: chrome/browser/chromeos/policy/user_network_configuration_updater_factory.h
diff --git a/chrome/browser/chromeos/policy/user_network_configuration_updater_factory.h b/chrome/browser/chromeos/policy/user_network_configuration_updater_factory.h
index fea07f7c01d045345901307d593a6f10f1691129..4cb06ef4228333e409ef03801fa55b8881e72677 100644
--- a/chrome/browser/chromeos/policy/user_network_configuration_updater_factory.h
+++ b/chrome/browser/chromeos/policy/user_network_configuration_updater_factory.h
@@ -13,6 +13,11 @@ namespace base {
 template <typename T>
 struct DefaultSingletonTraits;
 }  // namespace base
+
+namespace user_manager {
+class User;
+}
+
 class Profile;
 
 namespace policy {
@@ -45,6 +50,8 @@ class UserNetworkConfigurationUpdaterFactory
   KeyedService* BuildServiceInstanceFor(
       content::BrowserContext* context) const override;
 
+  static bool AllowTrustedCertsFromPolicy(const user_manager::User* user);
+
   DISALLOW_COPY_AND_ASSIGN(UserNetworkConfigurationUpdaterFactory);
 };