Feature flag

Agent features should ship switched off, be turned on first for the owner or a small group, then widened. A flag is also an emergency brake: if the agent behaves oddly, switch it off. Make sure the flag reaches every service that reads the feature, background workers included, and that an unknown value counts as off.