Hah I run my agent inside a docker with just the code. Anything clever it tries to do just goes nowhere.