Restrict to secure contexts

[reillyeon]

While this API does not provide access to information not otherwise available to the page this API is likely to be processing privacy-sensitive information (such as images taken with the user's camera) that should not be leaked over an insecure connection and so this feature should be limited to secure contexts.

@tomayac

[tomayac]

Hooray, the right thing to do :-) Thanks!