shell-things/etc/opt/chromium/policies/managed/enable-ech-ocsp.json

{
  "AdditionalDnsQueryTypesEnabled": true,
  "BuiltInDnsClientEnabled": true,
  "EnableOnlineRevocationChecks": true,
  "EncryptedClientHelloEnabled": true
}