I want my users to create their own agents which should be fine granting the Agent/Create permission. Unfortunately the credentials dropdown (e.g. for SSH username/password) only works when the user has the global Agent/Configure permission (node-based security doesn't work) which would lead my users to be able to configure every agent in my installation.

I may use node-based security without inheriting global permissions but that's no approach I would like to adopt.