Rough draft of EME Concerns document.

As discussed in various forums, this is a version of the opinion document that tries to catalog our concerns for EME as a web-facing API, without suggesting solutions or focusing on specific technical choices or problems with the current mechanism. Feedback definitely welcome.

Sorry, that was misunderstanding from my side. I treated "secure origins" as "trusted origins".