Seems they not running these agents with the same permissions of the user prompting them, what a disaster.