MIX: Introduce a definiton of  'authenticated origin/environment'.

A first pass at addressing w3c/webappsec#41 and slightlyoff/ServiceWorker#385.
Inspired by http://www.chromium.org/Home/chromium-security/prefer-secure-origins-for-powerful-new-features