The executables built by LLMs should only given access to a restricted test environment by default.