See comments on net::device_bound_sessions::Session::inclusion_rules_.
net::device_bound_sessions::Session::inclusion_rules_