Bug 1060278: Sort permission strings and add missing

Work in Progress.
I know this might be processed by code, but It's more meaningful to put appRequest/webRequest together