pub fn command_substitution_refusals(hc: &HarnessConfig) -> Vec<String>Expand description
BP-9 (D6 row): the !command substitution form, reported rather than
run. Returns one warning per config value whose text begins with ! —
pi§6 spells a credential/config command that way, and a reader coming
from pi would otherwise believe the command ran and silently ship a
literal !op read … as their base_url/header. Naming the refusal (and
the sanctioned door) is the whole point: the value is NEVER executed.