Doesn't the agent already have bash though?

My current security model is to give it a separate Linux user.

So it can blow itself up and... I think that's about it?

> Doesn't the agent already have bash though?

You don't have to give it bash, depending on your tools at least.

> So it can blow itself up and... I think that's about it?

And exfiltrate data via the Internet, fill up disk space...