Per-agent access control (knowledge & skills)