Actually there is no doubt. In most cases this is not acceptable. Therefore currently the automatic deployment of the agent registration is not feasible if the access to the initial deployment package cannot be controlled. This would require a more fine-grained permission. So @AndiU or who ever is responsible for the permission system needs to look into this problem.
Ralf