Bug 354493 - Add nsINetworkZonePolicy to restrict private resource loads from public networks r=mcmanus