Restricting what AI agents and integrations can reach — Dropbox, filesystem, connectors, and credentials.