Forbid non-CLI access to command-line scripts