Per task granular level control. You trust the configuration level not the execution level. API keys are honestly an easy fix. Claude code already has build i

Per task granular level control. You trust the configuration level not the execution level. API keys are honestly an easy fix. Claude code already has build in proxy ability. I run containers where claude code has a dummy key and all requestes are proxied out and swapped off system for them.