Why should an AI agent be given the minimum set of permissions necessary to complete its task?