We've spent 30 years learning zero trust... Now we seem to forget it the moment a user is an AI agent..