FYI, in version 8.1 (releasing soon) I have this documented in the command overview & the user guide.
- SubmitAsUser
- QueryData with ssappid parameter
- RenderForm (in browser)
- SubmitToSharePointList with ssappid
So - very few commands that I can see actually require injection w/ the admin deploy option.