Suspend (rather than shut down) the host upon policy errors.

remoting/host/heartbeat_sender.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef REMOTING_HOST_HEARTBEAT_SENDER_H_
 #define REMOTING_HOST_HEARTBEAT_SENDER_H_
 
 #include <string>
 
 #include "base/callback.h"
@@ skipping 30 matching lines @@
 //                  rem:sequence-id="456"
 //                  xmlns:rem="google:remoting">
 //     <rem:signature>.signature.</rem:signature>
 //   </rem:heartbeat>
 // </iq>
 //
 // Normally the heartbeat indicates that the host is healthy and ready to
 // accept new connections from a client, but the rem:heartbeat xml element can
 // optionally include a rem:host-offline-reason attribute, which indicates that
 // the host cannot accept connections from the client (and might possibly be
-// shutting down).  The value of the host-offline-reason attribute can be a
-// string from host_exit_codes.cc (i.e. "INVALID_HOST_CONFIGURATION" string).
+// shutting down).  The value of the host-offline-reason attribute can be either
+// a string from host_exit_codes.cc (i.e. "INVALID_HOST_CONFIGURATION" string)
+// or one of kHostOfflineReasonXxx constants (i.e. "POLICY_READ_ERROR" string).
 //
 // The sequence-id attribute of the heartbeat is a zero-based incrementally
 // increasing integer unique to each heartbeat from a single host.
 // The Bot checks the value, and if it is incorrect, includes the
 // correct value in the result stanza. The host should then send another
 // heartbeat, with the correct sequence-id, and increment the sequence-id in
 // susbequent heartbeats.
 // The signature is a base-64 encoded SHA-1 hash, signed with the host's
 // private RSA key. The message being signed is the full Jid concatenated with
 // the sequence-id, separated by one space. For example, for the heartbeat
@@ skipping 109 matching lines @@
   base::OneShotTimer<HeartbeatSender> host_offline_reason_timeout_timer_;
 
   base::ThreadChecker thread_checker_;
 
   DISALLOW_COPY_AND_ASSIGN(HeartbeatSender);
 };
 
 }  // namespace remoting
 
 #endif  // REMOTING_HOST_HEARTBEAT_SENDER_H_