Nah, I'm pretty sure it just requires giving the background AI agent admin privileges. The agent can already accidentally spend millions of dollars on tokens, apparently, so admin powers don't actually make it all that much more dangerous

/s