permissions: declarativeNetRequest