Remove CSP functions for frame.

It's only experimental and only supported by FF.
Add docs for the CSP part of browser-policy