. . . "Another possible variation, described later below, is that at least for such activities the security system relies mainly on whether the user or the program initiated the activity, and thus the security system can for example ask the user less questions or no questions if the user initiated the activity, and for example block it or limit it automatically if it was initiated by the program." .