Part 1 of a 2-part series on agent identity and security