kiosk: Tighten cert manager UI

chrome/browser/chromeos/login/app_launch_controller.cc

Index: chrome/browser/chromeos/login/app_launch_controller.cc
diff --git a/chrome/browser/chromeos/login/app_launch_controller.cc b/chrome/browser/chromeos/login/app_launch_controller.cc
index 31adbbe81ad0ac477817e19af6a6d69ba25ee3e8..2339a4148cf9d557caf643dd6be0013abf6168b9 100644
--- a/chrome/browser/chromeos/login/app_launch_controller.cc
+++ b/chrome/browser/chromeos/login/app_launch_controller.cc
@@ -361,8 +361,8 @@ bool AppLaunchController::CanConfigureNetwork() {
       return should_prompt;
     }
 
-    // Default to true to allow network configuration if the policy is missing.
-    return true;
+    // Default to false to allow network configuration if the policy is missing.

[tbarzic, 2017/06/06 19:02:42]

nit: can you update the comment :)
E.g.
Network configuration has to be explicitly allowed by the policy.

[xiyuan, 2017/06/08 19:13:57]

Done.

+    return false;
   }
 
   return user_manager::UserManager::Get()->GetOwnerAccountId().is_valid();