PDF support is unsandboxed
TingPing pointed out that using libevince in the UI process kinda defeats the point of having a web process sandbox. We should move the PDF rendering to the web process one way or another. Since libevince is probably not designed for this(?), in the worst case, we might have to use poppler-glib directly instead of libevince.