Context-aware agent authentication, because MFA isn't enough. 2FA and credential escrow for agents: every call an agent makes as you stops on your phone first, and the agent never holds a credential.