Add a set of reasonable defaults that should minimize unnecessary approval while also explicitly blocking certain dangerous commands that could either expose sensitive credentials or break a developer's environment