Bug 1043733 - Require sandboxing to load Gecko Media Plugins on Linux. r=jesup r=kang

Also refactors how sandbox support and disabling are handled, and allows
simulating a lack of sandbox support with an env var (for testing
without rebuilding a kernel).