Bug 979580: Enable CSP 1.1 {nonce,hash}-source by default r=sstamm