Comment by chollida1

Isn't a best practice to run llm's and agents under their own user that gives them only access to what they require?

How would an llm suddenly get access to your ~/.ssh folder if you didn't expressly give it access?