Bug 975373 - IonMonkey: Use MutableHandleValue for out-parameter in vm calls, r=h4writer