This test loads a secure iframe that loads an insecure style sheet. We should *not* trigger a mixed content callback because an active network attacker cannot corrupt the HTTPS security origin.