Changed manifest layout:
- permissions are only for core.*
- you can specify an api for a named dependency