I'm thinking of a nation state wishing to avoid a major diplomatic conflict. So I think it needs to stay low-level, legal or minor infractions only, and of course deniable. Also if it's hard to even notice something's being done, that's a real plus.