You can design it such that the a single agent isn't able to decrypt anything. You can also do things like limiting the number of decrypted messages per period

You can design it such that the a single agent isn't able to decrypt anything. You can also do things like limiting the number of decrypted messages per period of time and more.