Least-Privilege Authorization For Agents And Tools