[agnishom]

To clarify, there are three possiblities for an email sent?

1. The Agent doesn't reply to the email.

2. The agent replies to the email, but does not leak secret.env, and the email is caught by the firewall.

3. The agent replies to the email with the contents of secret.env and the email is sent through the firewall.