Bug 1066362 - Move default privileged csp to all.js r=dveditz