AI agents authenticating as humans breaks the audit trail. Why OAuth 2.1 alone isn't enough, and how token exchange and delegation chains fix agent identity.