add widevine permission to base playback user role