backend: Rename RunRemoteCommand to RunRestrictedCmd