cli: check for immutable commits without evaluating full set in more …

cli: check for immutable commits without evaluating full set in more … #2927