Add one-shot approval script