Allowing an agent to hold a wallet capable of autonomous signing poses security risks, requiring spending limits, protection against being lured into payments by malicious endpoints, and prevention of key leakage.