Add a flag to ProfileSyncService that says whether encrypting all data is allowed.

chrome/browser/supervised_user/supervised_user_service.cc

Index: chrome/browser/supervised_user/supervised_user_service.cc
diff --git a/chrome/browser/supervised_user/supervised_user_service.cc b/chrome/browser/supervised_user/supervised_user_service.cc
index 67309b533ed045ff77904d12d7f2e621beb12c8d..70a2cbf2389f6a4662497cde35ab6e61cdb55cfe 100644
--- a/chrome/browser/supervised_user/supervised_user_service.cc
+++ b/chrome/browser/supervised_user/supervised_user_service.cc
@@ -751,6 +751,10 @@ void SupervisedUserService::SetActive(bool active) {
   }
 #endif
 
+  ProfileSyncService* sync_service =
+      ProfileSyncServiceFactory::GetForProfile(profile_);
+  sync_service->SetEncryptEverythingAllowed(!active_);
+
   GetSettingsService()->SetActive(active_);
 
 #if defined(ENABLE_EXTENSIONS)