How do you avoid silently dropping command execution inputs in API body parsers?