bug 1050803: new mac signing hosts allow access to the full . r=dustin