Governing non-human identities in the age of AI agents