Yes, adding manual checkpoints between the LLM and the tools can help. But then users get UI fatigue and click 'allow always'.