Power and risk go hand in hand. Best approach is probably to run in a VM.
Yeap, that's exactly where the agents run in