Add missing perms to spec manifest.json