bug 880354: implement whitelist of domains that updates from balrog can point to. r=nthomas