LEDGE-225: moved ApiRestrictionProvider implementation to ledge-web