The allowlist made the attack easier - Chapter 11 - Why you can't secure an agent by telling it what not to do