Add support for kiosk mode on the client. Make sure the settings are written in the lockbox.

chrome/browser/policy/device_token_fetcher.h

Index: chrome/browser/policy/device_token_fetcher.h
diff --git a/chrome/browser/policy/device_token_fetcher.h b/chrome/browser/policy/device_token_fetcher.h
index c0a032fe80c09ccf7e145657c35cfb4a931714e0..4fba3299fdac9d508404a10ca650aca8f5723238 100644
--- a/chrome/browser/policy/device_token_fetcher.h
+++ b/chrome/browser/policy/device_token_fetcher.h
@@ -79,7 +79,10 @@ class DeviceTokenFetcher {
     // Temporary error. Retry sooner.
     STATE_TEMPORARY_ERROR,
     // Server rejected the auth token.
-    STATE_BAD_AUTH
+    STATE_BAD_AUTH,
+    // Server didn't send enrollment mode or the enrollment mode is not known to
+    // the client.
+    STATE_BAD_ENROLLMENT_MODE,
   };
 
   // Common initialization helper.