Open agent assignment in Zero Trust policies