[thwarted]

Containers are often used with user namespaces, which is literally another (set of) user account(s).

[khalic]

Yes but the encompassing service has the account, not the agent. You can completely segregate it from the rest of the system, like you’d treat an intruder