Use capability spec to control interfaces exposed between gpu & browser processes.

content/public/app/mojo/content_browser_manifest.json

 {
   "manifest_version": 1,
   "name": "exe:content_browser",
   "process-group": "browser",
   "display_name": "Content Browser",
   "capabilities": {
     // Remove this once http://crbug.com/632818 is fixed.
     "provided": {
-      "all_interfaces": [ "*" ],
       "gpu": [ ],
       "plugin":  [ ],
-      "web": [
+      "renderer": [
         "blink::mojom::BackgroundSyncService",
         "blink::mojom::BroadcastChannelProvider",
         "blink::mojom::BudgetService",
         "blink::mojom::MimeRegistry",
         "blink::mojom::NotificationService",
         "blink::mojom::OffscreenCanvasCompositorFrameSinkProvider",
         "blink::mojom::OffscreenCanvasSurface",
         "blink::mojom::PermissionService",
         "blink::mojom::WebSocket",
         "content::mojom::MemoryCoordinatorHandle",
         "content::mojom::StoragePartitionService",
         "content::mojom::URLLoaderFactory",
         "device::BatteryMonitor",
         "device::mojom::LightSensor",
         "device::mojom::MotionSensor",
         "device::mojom::OrientationSensor",
         "device::mojom::TimeZoneMonitor",
         "media::mojom::ImageCapture",
         "memory_coordinator::mojom::MemoryCoordinatorHandle"
       ]
     },
     "required": {
       "*": { "classes": [ "app" ] },
 
       // We allow the browser to connect to any interfaces exposed by its child
       // processes in the "browser" class.
-      "exe:content_gpu": { "classes": [ "all_interfaces" ] },
+      "exe:content_gpu": { "classes": [ "browser" ] },
       "exe:content_plugin": { "classes": [ "browser" ] },
       "exe:content_renderer": { "classes": [ "browser" ] },
       "exe:content_utility": { "classes": [ "browser" ] },
 
       "mojo:shell": {
         "classes": [
           "shell:client_process",
           "shell:instance_name",
           "shell:user_id"
         ]
       },
       "mojo:file": {
         "interfaces": [
           "leveldb::mojom::LevelDBService",
           "user_service::UserService"
         ]
       },
       "mojo:media": { "classes": [ "all_interfaces" ] }
     }
   }
 }