Firewalled VM, locked-in keyboard/mouse, 1 query to any agent and it's setup.