Firefox Marketplace のアプリを installPackage できるのか？[Firefox OS]

var manifestUrl = 'http://www.example.com/fxosapp/manifest.webapp';

var req = navigator.mozApps.installPackage(manifestUrl);
req.onsuccess = function() {
    console.log(this.result.origin);
};
req.onerror = function() {
    console.log(this.error.name);
};

"manifest_url": "https://marketplace.firefox.com/app/09490ca4-2e4b-4802-a112-28d3888ea400/manifest.webapp",

3066   _checkSignature: function(aApp, aIsSigned, aIsLocalFileInstall) {
3067     // XXX Security: You CANNOT safely add a new app store for
3068     // installing privileged apps just by modifying this pref and
3069     // adding the signing cert for that store to the cert trust
3070     // database. *Any* origin listed can install apps signed with
3071     // *any* certificate trusted; we don't try to maintain a strong
3072     // association between certificate with installOrign. The
3073     // expectation here is that in production builds the pref will
3074     // contain exactly one origin. However, in custom development
3075     // builds it may contain more than one origin so we can test
3076     // different stages (dev, staging, prod) of the same app store.
3077     //
3078     // Only allow signed apps to be installed from a whitelist of
3079     // domains, and require all packages installed from any of the
3080     // domains on the whitelist to be signed. This is a stopgap until
3081     // we have a real story for handling multiple app stores signing
3082     // apps.
3083     let signedAppOriginsStr =
3084       Services.prefs.getCharPref("dom.mozApps.signed_apps_installable_from");
3085     // If it's a local install and it's signed then we assume
3086     // the app origin is a valid signer.
3087     let isSignedAppOrigin = (aIsSigned && aIsLocalFileInstall) ||
3088                              signedAppOriginsStr.split(",").
3089                                    indexOf(aApp.installOrigin) > -1;
3090     if (!aIsSigned && isSignedAppOrigin) {
3091       // Packaged apps installed from these origins must be signed;
3092       // if not, assume somebody stripped the signature.
3093       throw "INVALID_SIGNATURE";
3094     } else if (aIsSigned && !isSignedAppOrigin) {
3095       // Other origins are *prohibited* from installing signed apps.
3096       // One reason is that our app revocation mechanism requires
3097       // strong cooperation from the host of the mini-manifest, which
3098       // we assume to be under the control of the install origin,
3099       // even if it has a different origin.
3100       throw "INSTALL_FROM_DENIED";
3101     }
3102   },