Agent ID Administrator enabled service principal takeover before April 9, 2026 patch, exposing privilege escalation risk in ...