jochen
63101f447a
On the control node agents are to run as an account that cannot become root (hq ADR 0266). The runtime keeps running as the operator, so the token, the identity and the home-scope items go to the agent's home through a helper started as that account; the licence follows the move, what was placed in the operator's home goes, and the guard refuses a session running as anyone else, recording to the journal. Unchanged where no agent account is named.