Override overly strict ImageMagick default security policy (#987504)
This derives a more permissive policy from the system default policy.
.
XDG_CONFIG_HOME is only set for invocations of convert instead of
globally to minimize inadvertent side-effects.
