AI agents are executing commands and touching production systems with access controls that were built for humans. Keycard and Smallstep are working to close that gap.