Improved permission checks in AgentTicketWatcher.

Conflicts:
	CHANGES.md