Add administrator polices

Follow Firefox administrator policies, and allow the administrator to set the preferences in policies.json.

The error code returned now differentiates between -2 (permission denied) and -1 (API errors)

The other changes are in the example native messaging host on github:
* no longer pollute stderr
* return error codes correctly (previously they were deleted by the zombie cleanup before they were reported)
* require python 3.5