remote updater permissions

changed isFriend to CanTool
Good catch, I agree with removing friendwrite, prop protection is designed to handle just that kind of thing.