Part 2 of a 2-part series on agent identity and security