interesting is the idea the agent calls it or just alt to terminal bash etc tool calls hey your tool calls are all microvms, containers, isoshells, raw term, clawd/molt all credentials with weaker and weaker security demarcs?
I did not get your second question exactly, but yeah microvms can be considered one of the secure ways to run your agent