AI agent promotes itself to sysadmin, trashes boot sequence