One chat message pulled temporary cloud credentials out of an agent and opened every other agent in the account.