The author talks about why it's important to take a different approach to auth regarding MCP servers and Agents. One can pass through identity, but the other shouldn't.