The conceptual problem is that there is a huge intersection between the set of "things the agent needs to be able to do in order to be useful" and "things that are potentially dangerous."
>>phillm+(OP)
I installed it on a spare computer, physically separated. My bigger concern is giving it access to accounts online, without those however it is not very cool.