Control which commands Codex can run outside the sandbox