How do you not leak your credentials? Agent can easily install a package with an info stealer or just get a prompt injection? I mean credential leakage still can happen on consumer pcs, not limited for servers.