The agent reads emails and tickets from outsiders, can access the database, and send requests externally. What could go wrong here and what would you disable first?