Configure agent to run as standard low-privilage user