The allow list doesn't appear to do prefix matching.

* If I allow "docker" I expect that the following to work "docker logs ..", "docker ps", "docker build ..", "docker exec ...". (e.g. /^(docker|docker .+)$/)

* Also, if I allow "docker logs", I expect the following to NOT work: "docker build", "docker exec ...", "docker prune -a"

I suggest that you make this the default or add a flag for "match by prefix" that is on by default; or, a "match exactly" to match all command-line arguments which is off by default.

Thanks.