PermissionHandler.approveAll is too permissive. Also add `PermissionHandler.approveSafety`, excluding high-risk kinds. - shell, write: deny - other kinds: approve