Agentic IAM in practice: Enforcing least privilege and auditability for AI agents