Comment by tintor

It is not sufficient to secure VM the agent has CLI permissions on.

We must also secure GPU and CPU nodes on API side which generate LLM tokens.