How should an agent-execution API validate runtime options while preventing unauthenticated command execution?