This does not include StreamWrapperInterface::LOCAL, because PHP grants a
greater trust level to local files (for example, they can be used in an
"include" statement, regardless of the "allow_url_include" setting), so
stream wrappers need to explicitly opt-in to this.