Keep cloud enrollment token in private

Change-Id: Idd3ac9f20e100368603e5d890d5726410e0c4121
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1869969Reviewed-by: Owen Min <zmin@chromium.org>
Commit-Queue: Xiang Ji <jxiang@google.com>
Cr-Commit-Position: refs/heads/master@{#707878}

chrome/browser/policy/e2e_test/tests/cloud_management_enrollment_token/cloud_management_enrollment_token.py

@@ -21,7 +21,9 @@ class CloudManagementEnrollmentTokenTest(ChromeEnterpriseTestCase):
 
   @test
   def test_browser_enrolled(self):
-    token = '4841902b-07f7-491f-b29d-154c4bab9555'
+    path = "gs://%s/secrets/enrollToken" % self.gsbucket
+    cmd = r'gsutil cat ' + path
+    token = self.RunCommand('win2012-dc', cmd).rstrip()
     self.SetPolicy('win2012-dc', r'CloudManagementEnrollmentToken', token,
                    'String')
     self.RunCommand('client2012', 'gpupdate /force')