Consider allowing the allowList to match on full command lines, not just commands #256280
Description
There's been some confusion around allowList doing more than what people expect, specifically around sub-command and inline command detection. Example: https://x.com/PrzemyslawKlys/status/1945461819566673978