Function should_deny 

pub fn should_deny(cmd: &str, tokens: &[Token]) -> bool

Whether cmd’s already-allowed verdict must be overridden to Denied because one of its path arguments reads/writes a sensitive locus. Returns false for commands in no gate.