Configurable safe commands

For example.
How to only allow codex allow to execute the commands in the safe-commands: {rg, awk, grep} without user approve?.

Since the sed is not in the safe-commands, then if codex want to execute sed, should ask user to approve.