Add-on authentication in child program

Hello folks,

We are researching usage of “system/child_process” API to launch a host program to connect to native desktop application.
One of the primary issues is that the host program has no means of authenticating the add-on that launches it. Specifically, i am looking at FF’s implementation of “allowed_origins” provided by chrome: https://developer.chrome.com/extensions/nativeMessaging.

I also have created an issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1197456

Would appreciate any help in this regard.

Thank you