client: commands: move command injection protection in Raw and all other commands use Raw