Bugzilla

### Beta/Release Uplift Approval Request
* **User impact if declined**: Users that depend on loading a pkcs11 module for accessing secure sites will not be able to do so. It has been reported that many healthcare sites in France depend on this functionality.
* **Is this code covered by automated tests?**: No
* **Has the fix been verified in Nightly?**: No
* **Needs manual test from QE?**: Yes
* **If yes, steps to reproduce**: 1) Install a pkcs11 module using brew with `brew install opensc` and ensure `/opt/homebrew/Cellar/opensc/0.23.0/lib/onepin-opensc-pkcs11.so` has been installed.
2) Open Firefox
3) Open Firefox Settings...
4) Click the "Security Devices..." button under "Certificates"
5) Click the "Load" button
6) Enter "/opt/homebrew/Cellar/opensc/0.23.0/lib/onepin-opensc-pkcs11.so" in the Module Filename... field and click OK

Ensure the module loads without error.
* **List of other uplifts needed**: None
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: Restores earlier behavior by allowing third party modules to be loaded in the parent process again. A change to macOS codesigning entitlements only.
* **String changes made/needed**: 
* **Is Android affected?**: No

### Beta/Release Uplift Approval Request
* **User impact if declined**:
Users that depend on loading a pkcs11 module for accessing secure sites will not be able to do so. It has been reported that many healthcare sites in France depend on this functionality.
* **Is this code covered by automated tests?**: No
* **Has the fix been verified in Nightly?**: No
* **Needs manual test from QE?**: Yes
* **If yes, steps to reproduce**:

1) Install a pkcs11 module using brew with `$ brew install opensc` and ensure `/opt/homebrew/Cellar/opensc/0.23.0/lib/onepin-opensc-pkcs11.so` has been installed.
2) Open Firefox
3) Open Firefox Settings...
4) Click the "Security Devices..." button under "Certificates" in the "Privacy and Security" section.
5) Click the "Load" button
6) Enter "/opt/homebrew/Cellar/opensc/0.23.0/lib/onepin-opensc-pkcs11.so" in the "Module filename" field and click OK
7) Ensure the module loads without error.

* **List of other uplifts needed**: None
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**:
Restores earlier behavior by allowing third party modules to be loaded in the parent process again. A change to macOS codesigning entitlements only.
* **String changes made/needed**: 
* **Is Android affected?**: No