Gives an agent read/write access to a specified local directory tree, with configurable path allow-listing.