Add trusted extension list

Also trust github.com to make the auth flow smoother.