Implement --exclude-tool as a simpler way to prevent an external command from being run
This is a much simpler (and cheaper) alternative to --exclude-command that requires a regex, and makes it easier to completely exclude multiple commands.
See also !110