Bug 961253 - restrict set of issuers allowed by the tokenserver; r=telliott