Currently we have configured all updates as "approved", and only today I have added my first "declined" patches, for the Application "SharePoint". 

This seemed to be the only option available, whereas what I would like to do, is automatically approve all Microsoft application, "Except" SharePoint, leaving those as  "manually approve" only.  I don't want to have to manually approve every patch, for every application.

Can you improve the approval status configuration, to allow users to choose the approval status, based on application?   In particular like the idea of having an application exceptions list, to what otherwise might be "automatically approve"

Question: Now that I have declined the SharePoint application (Client components; Foundation 2010 Core; Designer 2013), will Desktop Central even make me aware when I look at a server or desktop, that there is an unapproved patch available, or by declining, do I stop my Desktop Central server, from ever synchronizing information about the SharePoint updates?

What I want - Is to know about available patches, for the few applications that I feel I need to screen.  In particular applications which might require SQL server permissions, which my desktop central, deployment account is guaranteed not to have.