couchjs needs execmem, execute in isolated context
couchdb: allow disksup to monitor the local disks

Remove fs_getattr_xattr_fs because it is allowed by fs_getattr_all_fs
Merge pull request #6 from wtogami/couchdb_policy_fix

Couchdb policy fixes