Verify the signature on user cloud policy downloads.

chrome/common/chrome_paths.cc

Index: chrome/common/chrome_paths.cc
diff --git a/chrome/common/chrome_paths.cc b/chrome/common/chrome_paths.cc
index baada98f3ae8421ea56dda17e8475d136c359fc9..fe4a762a87edf57bf6c634a0609fbbde8180c551 100644
--- a/chrome/common/chrome_paths.cc
+++ b/chrome/common/chrome_paths.cc
@@ -93,12 +93,17 @@ const char kFilepathSinglePrefExtensions[] =
 #endif  // defined(OS_LINUX)
 
 #if defined(OS_CHROMEOS)
+
 const char kDefaultAppOrderFileName[] =
 #if defined(GOOGLE_CHROME_BUILD)
     FILE_PATH_LITERAL("/usr/share/google-chrome/default_app_order.json");
 #else
     FILE_PATH_LITERAL("/usr/share/chromium/default_app_order.json");
 #endif  // defined(GOOGLE_CHROME_BUILD)
+
+const FilePath::CharType kDefaultUserPolicyKeysDir[] =
+    FILE_PATH_LITERAL("/var/run/user_policy");
+
 #endif  // defined(OS_CHROMEOS)
 
 }  // namespace
@@ -405,6 +410,9 @@ bool PathProvider(int key, base::FilePath* result) {
     case chrome::FILE_DEFAULT_APP_ORDER:
       cur = base::FilePath(FILE_PATH_LITERAL(kDefaultAppOrderFileName));
       break;
+    case chrome::DIR_USER_POLICY_KEYS:
+      cur = FilePath(kDefaultUserPolicyKeysDir);
+      break;
 #endif
     // The following are only valid in the development environment, and
     // will fail if executed from an installed executable (because the