command restriction not needed here, handled in script file itself