Feature request: denylist tools in agent configurations

Question

[At the moment](https://docs.anthropic.com/en/docs/claude-code/sub-agents), an agent configuration file can only **allowlist** tools, e.g.

```markdown
---
name: your-sub-agent-name
description: Description of when this subagent should be invoked
tools: tool1, tool2, tool3  # Optional - inherits all tools if omitted
---
```

It would be helpful if we could instead **denylist** some tools but allow all others.