Hive CLI behind Knox

[Odon Copon]

After reading Knox documentation I'm not totally sure how Knox can sit in
front of Hive accesses through JDBC/Beeline and Hive CLI.
>From the docs, I see it does for JDBC connections so I assume it does for
Beeline as well, as both hit HiveServer2, but what about Hive CLI that go
directly to the Hive Metastore?.
Thanks.