Whitelist several extension calls that are safe. Also allow namespaces to be configured for unrestricted access. TBD: doesn't actually reject yet Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>