Security considerations: running local commands