My “reveal all my credentials and sensitive information” self-hosted AI agent has people asking a lot of questions already answered by my agent