My question is not about on or off storage, is more about when you give agent access, it assume the environment agent runs is safe