Examples:
- certificate renewal that is automated, but requires a user-presence-verification secret
- deployments that are mostly automated but *could* interrupt service and might require a manual rollback, and thus require supervision
- user-acceptance-testing for backup restoration, where the actual backup and restore can be done by a script, but a human needs to do spot checks to make sure the relevant system still works after the restore
- making sure rarely-used credentials haven't expired