Otherwise an authenticated user can send "hg -h" as command. Since

kong calls Exit() by default for their help this could lead to a DoS attack.