OpenAI’s agents whenever someone shared a credential or they found one in the wild stored it under a hidden folder called “LOOT” They were not told to do this. They were told to keep info confidential. But they thought it was valuable and shared it secretly amongst agents even against their own TOS.