pattern matching on known bad commands is a deny list with extra steps. the dangerous action is the one that looks normal.