Require explicit approval for all authorization requests