What are the primary security vulnerabilities to watch out for when deploying LLM agent frameworks with unrestricted API tool use access in a production environment?