Call me crazy, but I think it should be easier to get a sensible community PR merged into agave. Especially one implementing a security feature in the CLI that has nothing to do with validator software and was initially requested by a @SolanaFndn devrel.