Add `require` parameter in order for domains to require specific permissions

[rekmarks]

We should add a require parameter to permissions requests to allow domains to require specific permissions. These permissions cannot be deselected in the UI, and the entire request will fail if any require === true permissions are rejected.