Organizations are handing AI the keys to sensitive systems before securing guardrails around those identities.