It can't. As others pointed out, its the wrong layer to implement the security feature. The agent needs to operate in an isolated user / container.