CommandLanguage cannot easily be moved to script-security prior to split, because that would require updating the version of script-security in detached-plugins.
Since this is restricted and the only trace in user settings is the language name `command`, this could be done in a 1.1 update of the plugin.
@@ -34,7 +34,7 @@ import org.kohsuke.accmod.restrictions.NoExternalUse;
/**
* Language for launched processes, as per {@link Util#tokenize(String)} and {@link ProcessBuilder}.
*/
-@Restricted(NoExternalUse.class) // TODO move to script-security
+@Restricted(NoExternalUse.class) // TODO move to script-security after split
@Extension
public class CommandLanguage extends Language {
