MU-35 Added default rules to deny Firefox/Thunderbird extensions.