WICKET-5126 allow webfonts in secure resource guard