resolve #40 -- don't accept a command name with : or /