file: extend exec acl checks to commands with arguments