AI Agents need keys but not capabilities
Auditing is an ex-post activity; the source is authorization.
