A Vision for Access Control in LLM-based Agent Systems