Youd just whitelist the list of cli calls equivalent to what your mcp offers