Aside from hiding agent credentials from the agent, it also runs an isolated Docker Engine for the agent to use freely.