2-step approval for sharing externally

As a security control, allow for external sharing to require a 2nd-step approval (may need to implement roles which support approval relationships). This could be used for password sharing or any other content. Puts a safety in place for malicious sharing without having to disable it altogether.