This builds on top of #1703. Agent sessions are now properly access controlled. ## Test Plan Added unit tests