Give your sandboxed agents API keys they can't read
superserve.ai