I've been beating a dead horse over this for months now but nobody seems to listen until it's too late...

1) Sandbox any LLM that has access to tools (I don't mean the pathetic sandboxes the agent harnesses provide).

2) Assign them credentials and use auth/access control like you would for a human.