plugin/admin: replace admin_commands with command_whitelist