*wip* NSS: handle chromeos system slot.

net/cert/nss_profile_filter_chromeos.h

Index: net/cert/nss_profile_filter_chromeos.h
diff --git a/net/cert/nss_profile_filter_chromeos.h b/net/cert/nss_profile_filter_chromeos.h
index 469861987079347f1d0f18ab3bab879ade5c1eb3..36c42d007edf98cfe09c66ed9c494e10e900a137 100644
--- a/net/cert/nss_profile_filter_chromeos.h
+++ b/net/cert/nss_profile_filter_chromeos.h
@@ -36,7 +36,8 @@ class NET_EXPORT NSSProfileFilterChromeOS {
   // Initialize the filter with the slot handles to allow. This method is not
   // thread-safe.
   void Init(crypto::ScopedPK11Slot public_slot,
-            crypto::ScopedPK11Slot private_slot);
+            crypto::ScopedPK11Slot private_slot,
+            crypto::ScopedPK11Slot system_slot);
 
   bool IsModuleAllowed(PK11SlotInfo* slot) const;
   bool IsCertAllowed(CERTCertificate* cert) const;
@@ -64,6 +65,7 @@ class NET_EXPORT NSSProfileFilterChromeOS {
  private:
   crypto::ScopedPK11Slot public_slot_;
   crypto::ScopedPK11Slot private_slot_;
+  crypto::ScopedPK11Slot system_slot_;
 };
 
 }  // namespace net