How to Allow Untrusted Shortcuts (and find trusted Shortcuts