curious how the approval workflow works. do agents request access and wait for human approval, or is it more like predefined policies that let certain agent types through automatically