Can you not just give the agent’s user zero write permissions?