The status quo is that they have access credentials, which presumably come with some sort of vetting. So a "foreign agent" showing up and impersonating a reporter is unlikely.

I've visited the White House a couple of times and even setting foot on the complex as a visitor requires a background check, I assume the Pentagon functions similarly.