Nice. I just have

  sudo useradd agent

  sudo su agent

It was also doing some kind of headless Chrome stuff in there. I don't know how that works, but it was taking screenshots iirc.

I did also set up VNC at some point but didn't find it worth using.

>If it makes a mess, I can dump and reinstall in seconds.

This is also true of a $3 VPS, where I found it very amusing to give my agent root. What's the worst that could happen ;)