- Add instance actor - Add private mode, which uses an allowlist - Add Secure Mode, restricts access to blocked instances