Workflow Actions can be allowed or disallowed through the GUI using the "Manage Allowed Actions" page. This can be done on Farm and SiteCollection level. We want to provide different sets of Actions to SiteCollections. This should be done through an approval workflow. At the moment there is no API or Workflow Action to change the settings. The settings have to be changed manually. I would like to open a feature request for this.