Nous Research ships the Security plugin for Hermes and tightens the approval chain: trust is not a click.