dangerous inputs as untainted (see CWE-183 and CWE-184).
Use runtime policy enforcement to create a whitelist of allowable commands, then
prevent use of any command that does not appear in the whitelist. Technologies such as
AppArmor are available to do this.