AI agents are becoming useful because they can do things: read tickets, update records, call APIs, search private docs, trigger workflows, and run multi-step jobs. That usefulness creates a quiet security problem: many teams are giving agents raw API keys, long-lived tokens, or environment variables that were designed for backend services, not...