Wouldn’t it be safer to set up another user entirely for AI agents?

Then they can access each others' data, which may also not be what you want

	▲	grey-area 2 days ago \| parent [-]
		Users for AI should not be able to access others’ data, or become root.