Add CertificateManagementAllowed policy

Create a new int-enum policy to control certificate management
permissions for users. It can have one of the following values:
 0: Users can manage all certificates.
 1: Users can manage user certificates, but not device certificates.
 2: Disallow users from managing certificates

Bug: 872785
Change-Id: Ie5fff7d0d33a2f569f49b3b60cedabcb29db59dc
Reviewed-on: https://chromium-review.googlesource.com/c/1404078
Reviewed-by: Dominic Battré <[email protected]>
Reviewed-by: Matt Mueller <[email protected]>
Reviewed-by: Alexander Hendrich <[email protected]>
Reviewed-by: Steven Bennetts <[email protected]>
Reviewed-by: Pavol Marko <[email protected]>
Reviewed-by: Ryan Sleevi <[email protected]>
Commit-Queue: Andreea-Elena Costinas <[email protected]>
Cr-Commit-Position: refs/heads/master@{#628709}
diff --git a/chrome/browser/prefs/browser_prefs.cc b/chrome/browser/prefs/browser_prefs.cc
index 30731dc..eceb7d5 100644
--- a/chrome/browser/prefs/browser_prefs.cc
+++ b/chrome/browser/prefs/browser_prefs.cc
@@ -279,6 +279,7 @@
 #include "chrome/browser/media/protected_media_identifier_permission_context.h"
 #include "chrome/browser/metrics/chromeos_metrics_provider.h"
 #include "chrome/browser/ui/ash/chrome_launcher_prefs.h"
+#include "chrome/browser/ui/webui/certificates_handler.h"
 #include "chrome/browser/ui/webui/chromeos/login/enable_debugging_screen_handler.h"
 #include "chrome/browser/ui/webui/chromeos/login/hid_detection_screen_handler.h"
 #include "chrome/browser/ui/webui/chromeos/login/signin_screen_handler.h"
@@ -727,6 +728,7 @@
 
 #if defined(OS_CHROMEOS)
   arc::prefs::RegisterProfilePrefs(registry);
+  certificate_manager::CertificatesHandler::RegisterProfilePrefs(registry);
   chromeos::CupsPrintersManager::RegisterProfilePrefs(registry);
   chromeos::first_run::RegisterProfilePrefs(registry);
   chromeos::file_system_provider::RegisterProfilePrefs(registry);