This is the kind of thing why I'm building out my own LLM tools, so I can add fine-grained, interactive permissions and also log everything.