It may be useful to restrict commands to org members. This should be optional and default to not requiring it