PermissionHandler.approveAll is too permissive. Also add PermissionHandler.approveSafety, excluding high-risk kinds.
PermissionHandler.approveSafety