For sure sandboxing and isolation is feeling increasingly relevant regardless, but crypto theft is acting as a good sponge.

now I kinda wanna shadow the usual SSH creds files with LLM read-only user, so it can rummage thru the repos all it wants but I need to do the push using my creds.

That's why I stay away from that dumpster fire too!