The gatekeeper fight is the wrong fight: can you even see all your agent egress paths?