only allow key commands