Use allowlist in permission internally.

Now that our new APIs are named properly, clean up our naming
internally as well.

Bug: 158736025
Test: presubmit
Change-Id: If70f8b012dec2d4f80e7fa1d36c47f6fbe370e81
3 files changed