you want to put agents in a sandbox instead such as bwrap anyways.