update doc: extensions are allowed to install apps