Allow defining additional trusted policies

[wwwillchen]

For example if you use DOMpurify which has its own trusted type policy dompurify, you can't use it and you need to disable trusted types altogether for the page which isn't ideal from a security perspective.