It would be good to have manual approvals restricted by user. At the moment you have to have github oauth and use contexts. We just have the github app which is the newer way to do it.
Also have a timeout option in manual approval so after X days it will auto cancel.