When I was testing out Agent mode I had to give it login details in clear text (throw away account). Keychain access is very sensible.