If you have a Chrome Extension (i.e. IETab) that requires a lot of permissions for all sites you visit (such as "tabs", "webRequest" and "webNavigation"). Is it possible with GPO or registry settings to restrict which sites this extension is allowed to have these permissions and thus overriding the Manifest?
I have noted that there is an ExtensionSettings GPO with an "runtime_block_hosts" key, however, it does not seem to actually remove the extensions permissions as expected when the extension itself requests the permissions for all sites in its manifest.