Which authentication mechanism should you use to register the self-hosted agent?