clarified CSP constraints for manifests (closes #263)

@PaulKinlan, can you let me know if this is any better? Thanks!!