[Cocoa] Add SPI to disallow user-installed fonts