approval_policy = "never"
sandbox_mode = "danger-full-access"