What AI harnesses should learn from OAuth

I've been circling around the feeling of this problem for a while. We need a foundation of security for agents. And we have good examples of how to do delegation.