Comment by lostmsu

Funnily enough this is exactly how I ended up setting up CLI coding agents. E.g. made a separate user account, granted it RO or RW access to some of my projects, et viola