Set trust scope per window and not per application

With the trust scope we disable PalmSystem, PalmServiceBridge, etc. if we're loading a
remote site which is considerd as untrusted.

Signed-off-by: Simon Busch <morphis@gravedo.de>