Comma-separated list of commands, 'recommended' for
safe defaults, or 'all' to allow any command.
'all' must be the sole value — it is not recognized inside a
comma-separated list (unlike 'recommended').
Can also include 'recommended' in the list to merge with custom
commands.