AI agent identity: it's just OAuth

How should we authorize AI agents? We don't need to reinvent the wheel -- OAuth gives us most of what we need for controlled access delegation.