Allow XBL binding to untrusted content.

As per https://bugzilla.mozilla.org/show_bug.cgi?id=1050049 it is no
longer possible to bind to untrusted content (i.e. web pages) without
explicitly opting in to do so. This prevents the toolbar from being
loaded.