remote updater permissions

changed isFriend to CanTool
but the PP doesn't know what it's regulating there
it cant tell whether that's reading or writing a chip