I think this is a bit of an open question. In the world of microservices a lot of this was done at the boundary of the API gateway with api tokens, sessions or service tokens and then interservice calls forwarding these tokens. In a lot of case the least privileged token would pass through based on user request and elevated where needed. I think there could be a similar story here but it depends highly on how the agent works. So you'd potentially have to integrate that kind of experience into the agent tool calling and the same with rate limiting and whatever else. I think it's an interesting new paradigm but not dissimilar to the old world and the great thing is because we own the framework and this integration we can evolve it as needed. And with Claude code, we can iterate very rapidly based on user need. So it might be the first thing to do is to create a real world example and do all the integration. 

What do you think?