Until blocking the "normal" way to use agents becomes common enough that someone starts selling an off the shelf "Agentic KVM" and then the arms race begins.