Adds run approval, time-boxed change permissions and an append-only audit history to Jenkins instances used as a batch execution manager