Bug 938950 - Don't provide full access to compartment/zone/runtime during Ion compilation, r=jandem.