One can put `dotenvx` into the deny list for the agent but there will definitely be ways around of it.