Rules for what the agent may do were set by hand per machine, invisible to the mesh, and a session cannot loosen its own permissions; design 36 now takes them as a module setting under the mesh's own keys.
