this is one reason to favor specialized agents and/or tool selection with guards (certain tools cannot appear together in a LLM request)