How to Control payment approval workflow modification

Summary:

Is it possible in Oracle Fusion to enforce an approval process before any changes to BPM approval workflows are applied, or are there recommended workarounds to achieve this control?

Content (please ensure you mask any confidential information): Any user that has administrative role and have access to BPM worklist are able to modify approval workflows directly. The client is requesting to enhance the security by implementing an additional approval that would prevent any changes to the approval workflow unless explicitly approved through a predefined process.

Could you please advise on the applicability of such a control within the system?