AI agents break IAM