It would be great if it was possible to specify a list of allowed external actions (and workflows), either organisations or entire paths.