Drush commands are now filtered also on the websh wrapper level, so there is no reason to filter them in the lshell config for remote access.