Bug 853417 - Prevent self-hosted scripts from ever being visible to client scripts. r=jimb, a=bajaj