The machine is no big deal - it's the authn/authz that matters. What can the agents do with the credentials available to them?