Enable AssertEvalNotUsingSystemPrincipal
Similar to #31120 (moved) this is a defense in depth Tor should probably turn on.
This one is a little dicier though; it's currently only enabled in debug builds so it hasn't gotten as much testing. Maybe if Mozilla enables it soon we'd have more confidence doing so...