The 3 Security Gaps Enterprises Must Fix to Limit AI Agent Threats