This is cutting off the "Access to private data" leg of the lethal trifecta. One of the few ways to actually make an agent secure.