remote updater permissions

changed isFriend to CanTool
I think the most sensible thing to do is just remove friendwrite globally, as it's another prop protection policy decision that should be left to the prop protection.