Merge "Guard TIF vendor extension APIs by new permission"