Public search query: agent zero-trust policy change locked the agent itself out