Take only acknowledgements from a desk click, and make each answer a one-time ticket

Review found that any process of the operator's account can choose a dunst action,
so a click could release or stop a delivery in the operator's name; that tokens
lived for ever; that a warning's answers died in ten seconds; and that a restarted
notifier left dead buttons (hq ADR 0258).

modules/dunst/module.json

@@ -71,6 +71,7 @@
     ]
   },
   "emits": [
-    "action-chosen"
+    "action-chosen",
+    "started"
   ]
 }