Adding command_line prefix matching to do simple sandboxing of check executables.