Workflow: Jenifer/publisher can bypass two steps workflow (or directly publish the whole site): should not be possible by default

In order to keep workflow roles consistant, it would be nice to add a "Bypass Workflow" permission in the Admin Center's Role menu (I did not found it) and to remove such options to default roles/end-users.

In the current demo, despite some 2 steps workflow setup and despite the fact that Jenifer is not entitled to validate the first step, she can still bypass the current 2 steps workflows.

There should be a manner of precisely defining who can access to this "bypass" option (and by default this should only be root or the siteadmin).