Comment by michaelmrose

> As the sysadmin you can configure some actions to always accept or always deny, if you want

You can do this with sudo too.