NVIDIA NemoClaw adds OpenShell sandbox monitoring and strict policies to secure OpenClaw agents, but setup on Brev is error-prone and slow.