similar to how emacs handles configuration approval I think