Add deprecated privilege of web API (notification.read/write)