This was my thinking, which is why I think there is some chance to 'catch' him before he 'makes his escape'. If he plays at home (very probable), outside office hours (inconvenient to request changes), without ability to affect code (likely), there would be a 'stable' ava.