Comment 18 for bug 68040

no!

1. showModal should not be available <period>

2. evil sites can and do run https. heck, they'll sign jars if necessary.

3. now, making showModal* not trigger an error, and perhaps even provide the
info that the caller wants, i could live with.