Comment 140 for bug 294712

There are content policies that implement security checks, last I checked, so we can't just skip calling into content policy code.