You don't need a VM for your agent, just a separate user account is plenty.