code cleanup

unified external command execution syntax
added "strict" preload strategy and --check option for integrity checking
of configuration and secrets