core: deny question tool permission by default in CLI sessions to prevent unauthorized usage