Placing the agent loop on the server rather than the virtual machine means that zero-day security updates and VM rebuilds will not cause the agent service itself to go down