Comment by IanCal

You need it if your agent can access the internet and read files you don’t want public. That’s a relatively minimal case.