kiosk: Tighten cert manager UI

chrome/browser/chromeos/policy/proto/chrome_device_policy.proto

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 syntax = "proto2";
 
 option optimize_for = LITE_RUNTIME;
 
 package enterprise_management;
 
@@ skipping 358 matching lines @@
   optional int64 auto_login_delay = 3;
 
   // Whether the keyboard shortcut to prevent zero-delay auto-login should be
   // enabled or not. By default, the user has 3 seconds to press a shortcut
   // to prevent auto-login, which is useful to sign-in to a regular user session
   // and configure the machine. If this policy is set to false then this
   // shortcut is disabled and there is no way to skip auto-login.
   optional bool enable_auto_login_bailout = 4 [default = true];
 
   // Whether network configuration should be offered or not when the device
-  // does not have access to the Internet. If the policy is omitted or set to
-  // true, the network configuration will be offered. Otherwise, only an error
-  // message is displayed.
-  // Note: If both this policy and enable_auto_login_bailout policy above is
-  // set to false, there are chances that the device might become totally
-  // unusable when there is no Internet access and has to go through the
-  // recovery process.
+  // does not have access to the Internet. If the policy is set to true, the
+  // network configuration will be offered. Otherwise (policy is omitted or set
+  // to false), only an error message is displayed.
+  // Note: If enable_auto_login_bailout policy above is set to false and this
+  // policy is omitted or  set to false, there are chances that the device might
+  // become totally unusable when there is no Internet access and has to go
+  // through the recovery process.
   // If the device is offline at startup then the network configuration screen
   // is always shown, before auto-login kicks in.
-  optional bool prompt_for_network_when_offline = 5 [default = true];
+  optional bool prompt_for_network_when_offline = 5 [default = false];
 }
 
 message AllowRedeemChromeOsRegistrationOffersProto {
   // Chrome OS Registration service provides way for chromeos device users
   // to redeem electronic offers provided by service provider.
   // This value determines if users are allowed to redeem offers through
   // Chrome OS Registration service.
   optional bool allow_redeem_offers = 1 [default = true];
 }
 
@@ skipping 449 matching lines @@
       45;
   optional DeviceLoginScreenAppInstallListProto
       device_login_screen_app_install_list = 46;
   optional NetworkThrottlingEnabledProto network_throttling = 47;
   optional DeviceWallpaperImageProto device_wallpaper_image = 48;
   optional LoginScreenLocalesProto login_screen_locales = 49;
   optional LoginScreenInputMethodsProto login_screen_input_methods = 50;
   optional DeviceEcryptfsMigrationStrategyProto
       device_ecryptfs_migration_strategy = 51;
 }