allow all commands to run in private