AI didn't just create new attack surfaces. It fundamentally changed who—and what—is requesting access in your environment.