To be clear, I'm not saying you can't (or shouldn't) review the results, only that you can (and should) give the harness the ability to do everything it needs to function without hitting permission barriers that need to be manually approved.

The correct way to run these safely is to sandbox them so real lasting damage is impossible, not to micromanage individual access requests.