VMs won't contain cyber-capable agents