From Dev.to
Blocking a QA agent: verify the sessions, then try the API
An agent-access switch is useful only if you check what happens beyond the switch. An administrator can see “Blocked” while still needing answers about existing sessions and credentials already issued...