Limit Agent password changes to themselves or an administrator
Make dangerous Agent predef steps Admin only.