Deploy your agent as a function and get a real Linux machine per session — ffmpeg, Chromium, git, hibernate and resume. Keys never enter the runtime.