Make a db replica or just a db user account with readonly permissions, and have only those in your env, or docs accessible to agent. It's liberating.