This also allows agent but not password, or password but not agent. Could you improve it in a way that it only allows agent and password or neither agent nor password?