mnicole, you do not need to approve extension updates unless they ask for more permissions.

In the ancestral thread, the assumption is those wildcard permissions were already granted.