AI labs should never give test agents access to the real internet