Comment by wek

Thank you for this. This seems like a promising approach to agent permissioning. What are the performance implications?