Restrict shell commands by default