remove principal permission checking in web api
mochitest-browser of interest api whitelist functionality