If you don’t authenticate AI agents upfront, you’re not running automation — you’re handing attackers the keys at machine ...