registration: Support Change/RemoveCredentialsBlacklist in extension.json