VMs won't contain cyber-capable agents — Blankdot