weren't you all running agents in contained vms before???