Put it in an otherwise airgapped dmz.