Just want to note that suggestion #2 is easily detected by any org with even a whiff of security tooling in place. Quick way to get terminated.