Comment by dlt713705

In a VM or a separate host with access to specific credentials in a very limited purpose.

In any case, the data that will be provided to the agent must be considered compromised and/or having been leaked.

My 2 cents.