remote updater permissions

changed isFriend to CanTool
@AbigailBuccaneer suggested we add another argument to CanTool which tells it what it's doing