The second one gives me enough pause that I might be tempted to just keep what you have in place, and instead train users to approve in the right order