Support kas->agent connections

This issue is to track implementation of the design from #490 (closed). Design doc direct link.