done: secret builtins (e.g. !) should be explicit.