Whitelisting also quite likely doesn't work ("of course I will allow my agent to run find, that can do no harm")