I've been refused to do cybersecurity (read-only investigative access against the recent brotli cve) with Opus 5.5 when I had full SSH access, so I guess you've got to have a fallback?