Give an agent authority once, and it never has to ask again.

A support agent was granted standing access to refunds, customer records, and your social accounts months ago, for a perfectly good reason at the time. Nobody has re-checked that access since. Press "Run rogue agent" and watch what a single agent can do while nothing is watching whether it should still be trusted. Then press "Engage Authority Gate" and watch the same agent hit a wall it cannot talk its way past.