Use capability spec to control interfaces exposed between gpu & browser processes.

content/public/app/mojo/content_renderer_manifest.json

 {
   "manifest_version":  1,
   "name": "exe:content_renderer",
   "display_name": "Content Renderer",
   "capabilities": {
     "provided": {
-      "all_interfaces": [ "*" ],
       "browser": [
         "content::mojom::EmbeddedWorkerInstanceClient",
         "content::mojom::EmbeddedWorkerSetup",
         "content::mojom::FrameFactory",
         "IPC::mojom::ChannelBootstrap",
         "mojom::ResourceUsageReporter",
         "visitedlink::mojom::VisitedLinkNotificationSink",
         "web_cache::mojom::WebCache"
       ]
     },
     "required": {
       // Remove this once http://crbug.com/632818 is fixed.
       "exe:content_browser": {
-        "classes":  [ "web" ]
+        "classes":  [ "renderer" ]
       },
       "mojo:ui": {
         "interfaces": [
           "ui::mojom::Gpu",
           "ui::mojom::GpuService"
         ]
       }
     }
   }
 }