On windows I create a new locked down user with NTFS permissions denied everywhere except the target project path. I then run the agent app as that user with ot

On windows I create a new locked down user with NTFS permissions denied everywhere except the target project path. I then run the agent app as that user with otherwise unrestricted powershell access.