[RFC v3 9/9] kdb: Allow access to sensitive commands to be restricted by default