If you have login access to the command line, there is no, _no_, NO!!!!! reason to prohibit xcmd. Stick that to your "administrators". x starts a shell that differs from a "normal" login shell only in its environment (working directory, some environment variables), but not in its privileges. Any havoc you can wreak on the system with the x command is even easier done from the CLI. Instead of bringing forth strawman arguments, they should harden their system by proper granting of rights, having quotas, workload management and so on. "My" users are reigned in by quota management in locations where they have write access (or I set up dedicated file systems that don't bother me if full), restricting the number of concurrent SAS sessions (so they don't cause excessive paging by running >30 SAS sessions at once, one of the idiots actually did that one time), and proper management of access rights to resources. I actually encourage them to use ssh and the x command to make their days easier, and I never had problems from that. If your admins think that only some users should have xcmd (and CLI access) enabled, then they only need to define an additional workspace server that only the privileged users have access to.
... View more