add regex list of allowed commands

[jdehaan]

And then remove the caps / replace that. A file_stat of file_content
Think deeper about a correct security concept

Report commands that violate the current allow list (hah audit)