The default is ask for approval with option to whitelist certain commands.