I believe the relevant allow is now "xr-spatial-tracking," but yes, it was just recently added thanks to me raising an issue in the GitHub repo https://github.com/itchio/itch.io/issues/1117
