[prmoustache]

This is saying that restricting privileges by blacklisting commands do not work (and never worked).

[exyi]

Whitelisting also quite likely doesn't work ("of course I will allow my agent to run find, that can do no harm")

[laserbeam]

Cool, so it is what I imagined, thanks!