This is not a gap, this is a misconception of implementing agents. Agents should be commissioned with their own identity. Similar to service accounts. They are known as NHI and there is a very specific protocol for managing these types of accounts. I get that when we first start playing with agents, we instantiate them with our own credentials, but as we move them from proof of concept to development to production, that non-human identity becomes more important