Yeah, this is exactly what I was thinking.

Maybe they’ll add the ability to sandbox the env variables from the agent’s bash execution via the Agent SDK settings at some point.