Now Is the Perfect Time to Change Sudo

Just use qube OS and give your agent a qube to play with. All your data stays safely in your other qubes the agent has access to passwordless sudo. Everybody wins.