vSAML: Primitives for a General Architecture of Agent Security