[PATCH v1 7/7] provide "sf protect check" command