Because 'trust me' isn't a permission model for your AI coding agent.