I do this at the tool registry layer but this is a good idea for the agent sandbox itself