Letting Agents Act on Behalf of Users Safely