The permission descriptor for the
allow-run permission, which controls
access to what sub-processes can be executed by Deno. The option
allows scoping the permission to a specific executable.
Warning, in practice,
allow-run is effectively the same as
in the sense that malicious code could execute any arbitrary code on the
optionalcommand: string | URL
allow-run permission can be scoped to a specific executable,
which would be relative to the start-up CWD of the Deno CLI.