AI Agents Act Like Employees With Root Access—Here’s How to Regain Control