Even with a human involved, the process can be subverted by the human basically approving all requests.