much better, but still can't initialize nsScriptSecurityManager!