fix(*): a command the host denies stays denied once it is handed to a sub-agent

fix(*): a command the host denies stays denied once it is handed to a sub-agent #671