Differentiation between Agent's ability to run updates and run scripts

At the moment, in order for an agent to be able execute updates on end-user devices via Go To Resolve they need to have the "Remote Execution" permission enabled, which is what allows an agent to run...