It would be useful for automated workflows to be able to install only previously trusted tools, so that a new tool being added to a checked-in aftman.toml doesn't break any existing tooling.