Wouldn’t implementing this just give a false sense of security? As long as an agent can execute arbitrary code it can access anything it has access to. Adding a

Wouldn’t implementing this just give a false sense of security? As long as an agent can execute arbitrary code it can access anything it has access to. Adding a dont-access-my-secrets-pretty-please.yml file isn’t going to help any