kdb: Allow access to sensitive commands to be restricted by default