AI agents are now capable enough to run for days without supervision, and the security built around them was never designed for that.