Made me think (never gonna happen but still) maybe we could have different cookies/sessions for the agents and for ourself where the webapp can decide what perm

Made me think (never gonna happen but still) maybe we could have different cookies/sessions for the agents and for ourself where the webapp can decide what permissions either can have. For gmail maybe you could allow the agent to read your email but not send email and so on.