fix SOURCE cmd check and disallow nested SOURCE cmds