diff --git a/seats/node-login-shell/seat.json b/seats/node-login-shell/seat.json
index 9d6295a..44a4d28 100644
--- a/seats/node-login-shell/seat.json
+++ b/seats/node-login-shell/seat.json
@@ -10,6 +10,7 @@
       "name": "execute",
       "description": "Run one command on this machine as the operator account, in a non-interactive login shell in its home; answers with what it printed and how it exited.",
       "optional": true,
+      "needs-approval": true,
       "input": {
         "properties": {
           "command": {