Comment by noncoml

> Unix solved this decades ago: agents should be their own user

That’s a hand waving if I’ve ever seen one.

How is that going to help?

If the Agent gets launched with is own user is will not have access to ANY of the files that are only read by the user.