Whether commands are isolated from the app and device (a sandbox); if not, they need approval by default.