Agents

One setting: Allow agents to start safe updates (off by default). When it is off, the run-safe-update ability is hidden and refuses to run. The other abilities are read-only, or queue a proposal that waits for approval. See the Agencies article.