shell runs as the user the agent process runs as. configure SAMIT_SHELL_USER on the VPS to drop privileges.