An administrator is applying an updated Host Firmware Package to 40 production B-Series blades associated with a service profile template. Each blade requires a reboot to activate the new adapter and BIOS firmware. The change window is tight, and the team wants to avoid an uncontrolled mass reboot while still ensuring the firmware activates only when explicitly approved by the operations team. Which configuration ensures the reboots are held until manually authorized?