I don't like this idea. I tend to look at the log after something has not worked to see if anything was blocked. Another example is Microsoft office. It uses a ClickToRun process of a versioned, numbered directory to update itself automatically and it regularly gets blocked when the version changes. Looking at the log I can see it blocked and allow the new version. If it only logged when open I would have to leave to open to catch this and similar things. For me it takes 1 or 2 seconds to load the log and I can quickly see all entries for the last couple of hours.