It may be valuable for the spec and/or explainer to show some example code using Element.setAttribute() on an iframe in JS to allow some permission, beyond specifying the 'allow' attribute in html.