I would like to know how to restrict a single (non-admin) user from using specific commands from command prompt.
For example: `dir` should be allowed, but `shutdown` should be blocked.
As a bonus, is this possible in a whitelist (i.e. all commands are blocked except `dir`)?