security updates to specify which types of commands to allow