diff --git a/dbus/cryptohome/rpc.proto b/dbus/cryptohome/rpc.proto
index bd5e6a2..1d81a2d 100644
--- a/dbus/cryptohome/rpc.proto
+++ b/dbus/cryptohome/rpc.proto
@@ -98,6 +98,9 @@
   // Performs a public mount, which is used for a Kiosk session. Credentials are
   // not needed in the request; they are synthesized by cryptohomed from id.
   optional bool public_mount = 5;
+  // If set to true, mounts the vault to a temporary location. The mount is not
+  // exposed to the usual locations (/home/user, /home/root).
+  optional bool hidden_mount = 6;
 }
 
 // A BaseReply type is used for all cryptohomed responses. A shared base class
diff --git a/dbus/login_manager/dbus-constants.h b/dbus/login_manager/dbus-constants.h
index 2ad22fe..aa5aa4f 100644
--- a/dbus/login_manager/dbus-constants.h
+++ b/dbus/login_manager/dbus-constants.h
@@ -21,6 +21,8 @@
 const char kSessionManagerStoreUnsignedPolicyForUser[] =
     "StoreUnsignedPolicyForUser";
 const char kSessionManagerRetrievePolicyForUser[] = "RetrievePolicyForUser";
+const char kSessionManagerRetrievePolicyForUserWithoutSession[] =
+    "RetrievePolicyForUserWithoutSession";
 const char kSessionManagerStoreDeviceLocalAccountPolicy[] =
     "StoreDeviceLocalAccountPolicy";
 const char kSessionManagerRetrieveDeviceLocalAccountPolicy[] =