Managed Deep Agents add tokens outside agent sandboxes through a proxy

LangChain warns that agents can run packages their users didn't write, and a malicious package would expose any credentials in the sandbox. It says Managed Deep Agents instead adds the user's token through a proxy outside the sandbox, only on calls to allowed services, so the agent never sees it.