validate cli commands against whitelist