only validate_command for scripts, not json