[init_cell] updates

[jcb91]

including:

• making automatic running of initialization cells configurable (fixes can I avoid initialization cells to be run on notebook load? #812)
• never automatically running initialization cells in untrusted notebooks (would cause the outputs to be trusted as though the current user had knowingly executed them, breaking trust model)