Agents

Multiple restricted agents, one policy-controlled vault.