What's a reasonably secure way to use Hermes? Does it have to be on a segregated machine, or is there a good way to sandbox it on your main computer? How difficult is it to give the agent selective ac...