envoy-exec: add a sanity check