This is what I can't get over - who in their right mind would _ever_ give an agent enough access to delete prod data?