Change users around so that exemptions have both an approving authority and a requestor