Show HN: Tired of duct-taping access control into agent prompts. Here's the fix