patches/Restricted: properly support StringIO

- this caused guarded_getattr to always allow attributes of instances of
old-style classes
- cStringIO.StringIO("initial value")