Fortunately I've only had to set something up like this once. If you're saying that the workflow would have to whitelist the script by some kind of workflow setting, it would not be that big of a deal to whitelist one script.