Warn mode is the easy win and probably where I'd start. Redirect is more interesting but you're handing the agent a rewritten command it didn't ask for, which could be surprising in ways that hurt more than help.