it's running a full VM so the agent can eg: run docker commands safely etc