Restrict user environment to specified commands
