Security vulnerability guardrails are kind of stupid to begin with... I would want the AI agent to be able to fix my security issues... having it obscured is just begging for more unsafe code in the world.
Oh, I'll just leave this SQL injection path in place.... etc.