add column: validate nested columns and only allow add columns on non-system