set

Replace the allowlist.

if any entry is blank or starts with a command in FORBIDDEN_LEADING_COMMANDS. The previous allowlist is kept in that case.