agents:
  ParcelAgent:
    tools:
      knife:
        filesystemAccess: allowed
        secretKeysReadable: []
        secretKeysRevealable: []
        middleware:
          - name: knife-policy
            filesystemAccess: denied