spec: https://w3c.github.io/webappsec-permissions-policy/
  - bakulf
  - clelland
