This machine is gated.Enter the passphrase.

Past this gate you drive an agent with shell and file access inside this VM. Every command and every write is shown to you for approval first, but the gate is shared — treat the passphrase as the only thing standing in front of the machine.