To do anything useful, our agents needed admin credentials. Someone had to hand them over. Two problems. A credential in an agent's context can leak into logs or transcripts. Worse: accountability. Ask "what did the agent change yesterday?" and the honest answer was — whatever the admin account did. Every human operator works under scoped access, expiring credentials, a recorded trail. The agent had none, because nothing existed to enforce it. #AIagents #security #selfhosted