update manifest permissions with new domains