protecting cli environments