Use a separate machine for these stuff, never mix your clean machines with the dirty ones, complete separation, different networks