add restrictions in manifest.json