Blocking a QA agent: verify the sessions, then try the API

An agent-access switch is useful only if you check what happens beyond the switch. An administrator...