Ideas:

• in the default command handler, detect that the default command doesn't exist and return an error saying so. probably the best option.
• prevent SO by debugging why the metadata that's supposed to prevent that isn't propagating
• error on startup if the default command does not exist