The best approach embeds artificial intelligence into agencies’ existing security controls while preserving human judgment