Explicit permission is usually one yes button , approve once, then everything after is silent.Per-capability grants and re-asking on risky actions jusk make the failure visible.