Why not just put the agent in a VM?