Engine: Strict Mode

[marcoroth]

Add an engine.strict configuration mode in the .herb.yml so security and validation errors can be enforced by default but also turned off to ease the migration.

[marcoroth]

Resolved via #1184 and #1657