4th lesson from building a personal #ai #assistant: proxy + #sandbox is the only reasonable way to handle #credentials.
Agents can use services, but should never see long-lived tokens. Assume anything they access can leak.
If you don't want your API key being leaked, don't give it to the #agent.
