prevent cli from being called via web