Hermes Agent permission isolation

Does Hermes Agent read keys on its own?

Hermes Agent acts as a local agent, and if you give it file, shell, network, and key directory permissions, it may indeed read native credentials when...