What devices are they using? If ChromeOS then I would think they shouldn't be able to sign out due to the above mentioned "Force users to sign-in to use the browser" but if they're using Windows or Mac that's another story. I believe there's a setting under Devices->Chrome called Managed Browsers that could be relevant here but it looks like you need a subscription to utilize.