https://codereview.chromium.org/2451293002 adds a console message when the user has the mark-http-as flag flipped to show DANGEROUS on HTTP and the site includes a password/credit card field on an HTTP page. We should have a browser test that this console message gets logged properly, along the lines of ChromeSecurityStateModelClientTestWithPasswordCcSwitch.ConsoleMessage. But before adding another long ugly console message test, we should probably do the cleanup in 658099 that can simplify these tests.