CyberArk wrote about this

Extracted from: agent-access-control-zero-code-security.mdx