Run |nss-get-cert| as the 'chronos' user.

BUG=chromium-os:37265
TEST=unit
TEST=connect to Google-A, no errors on /var/log/messages, /var/log/net.log
TEST=connect to VPN, no errors on /var/log/messages, /var/log/net.log

Change-Id: Ifb23c9dab43fbe12c91a401cc64689eecabd79ac
Reviewed-on: https://gerrit.chromium.org/gerrit/40018
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Commit-Queue: Jorge Lucangeli Obes <jorgelo@chromium.org>
diff --git a/minijail.h b/minijail.h
index 3b2d084..5289101 100644
--- a/minijail.h
+++ b/minijail.h
@@ -37,6 +37,10 @@
   // minijail_run_pid
   virtual bool Run(struct minijail *jail, std::vector<char *> args, pid_t *pid);
 
+  // minijail_run_pid and waitpid
+  virtual bool RunSync(struct minijail *jail, std::vector<char *> args,
+                       int *status);
+
   // minijail_run_pid_pipe
   virtual bool RunPipe(struct minijail *jail, std::vector<char *> args,
                        pid_t *pid, int *stdin);
@@ -46,6 +50,11 @@
                              std::vector<char *> args,
                              pid_t *pid);
 
+  // RunSync() and Destroy()
+  virtual bool RunSyncAndDestroy(struct minijail *jail,
+                                 std::vector<char *> args,
+                                 int *status);
+
   // RunPipe() and Destroy()
   virtual bool RunPipeAndDestroy(struct minijail *jail,
                                  std::vector<char *> args,