run-command: forbid using run_command with piped output