[bug 835736] Add model whitelist for image attachments.

White-list so images can't be attached to random models at will.

r?