Resource start, stop and restart commands (and possibly other commands that affect the serverside, haven't tested) can be executed by anyone in the server.

While it can be partially prevented using event.PreventDefault() with an onResourceStart and onResourceStop eventhandler, that causes issues when scripts are being started or stopped by the server (e.g. when starting or stopping the server executable).

Furthermore, even with a global addEventHandler with event.PreventDefault() in place for the onResourceStart and onResourceStop events, if a script has a bindEventHandler for onResourceStart and onResourceStop, they are still being triggered.

Preferred solution: Including a script to handle these functions, instead of hardcoding them. Or allowing the default commands to be overwritten through scripting. The Replace variable in addCommandHandler currently doesnt seem to have any effect on the built-in commands.