Permission mode (`dontAsk`) that silently denies tools not in the pre-approved list, without prompting.