Function check_oci_command 

pub fn check_oci_command(
    service: &str,
    spec: &SandboxSpec,
) -> Result<(), String>

Refuse, when a file is loaded, an OCI command line that cannot be written.