Good idea - I suppose in CEE environments using the bakery, one could also pull the name that the host has in checkmk from the cmk-update-agent.state
something like:
grep -Po “(?<=host_name’: ‘)([^’]*)” /etc/cmk-update-agent.state
suggestions for easier regexes are welcome 
did you build a limited role for the automation_user?