[NVidia] default_off, since much of this is broken

Closes #430.

Unfortunately, many of these rules & subdomains are broken.
[Samsung] fix support pages

Add exclusion for support & frames. Their i18n is a lie, so /us/ only.

Closes #309
[Ikea] webapp rule caused CORS violation

Closes #438
[Samsung] Condense samsung exclusion
[Expedia] Fix hugely broken site with exclusion

Only p/ pub/ and .*Checkout seem SSLized :/

Everything else causes massive breakage. Closes #362
[GoogleImages] Fix .co.(in|kr|ug) bug

Closes #348
Add note, convert exclusions to rule regex.
Non-capturing ?= -> ?:
Drop problematic Atlantic rule

This seems no longer applicable given Atlantic SSL changes.
Bakedal SSL works now
[CATO] Vaguely-unbreak CATO

We were only matching .com before, and CATO doesn't support TLS anymore :(
Indymedia.org
Koumbit.org
Occupywallst.org
Alternatives.ca
Sustainablebusiness.com
[Mindshare] Remove old domains, old downgrade rules
[Stanford] www6 slac now valid SSL
[SEC] Edgar now supports SSL

It's a shame this is under platform mixedcontent.
Anchorage still requires downgrade