short-term mediation is always always always run it in a virtual machine with as minimal credentials as possible.