Bug 876399 - Mozmill module loader should prevent leaking of symbols through the global object by using a sandbox. r=hskupin, r=ctalbert