Only 11% of production agents pass the AI agent security bar