MosaicLeaks: Can your research agent keep a secret?