just-in-time access
In short: Just-in-time access grants permission only at the moment a task needs it, and removes it when the task ends. For agents, this means credentials are issued per task or per call instead of being held permanently. It narrows both the time and scope of any misuse.
Where does it show up in practice?
Aembit and Astrix Security both describe just-in-time credentials for agents.