Tag least privilege for AI agents