The next stage of identity security will not be defined by how we manage humans, machines or agents as separate categories.