Settings: add headsup manifest permission