we automatically block extensions and require that extensions must be approved, but this is a tedious process.