exposed shell commands in config file