I've found codex will find another way to do what it wants, if I deny it access to a command request.