Do security attack check only when command not found to reduce the critical path.

Do security attack check only when command not found to reduce the critical path. #1340