least privilege for agents is the same lesson we already learned for services

give the agent the narrowest set of tools and scopes it needs for the task at hand, nothing more. it is not a new idea, it is just the old idea applied to a new kind of process.