Block AI coding agents from shipping insecure/expensive Terraform