Add basic top-level filter validation

To protect against accidental runs on EVERY node (danger with
mcollective).