remote updater permissions

changed isFriend to CanTool
This looks broken - now nobody can edit even their *own* E2s if `"wire_expression2_friendwrite"` is off.

I think we should also move to get rid of `"wire_expression2_friendwrite"` entirely, as it's another decision that should be up to the prop protection.