Thanks, that was it.
This comment from the file is very misleading, as I'm running a single tenant controller:
<!-- Specify the account name and account access key for this agent to authenticate with the controller.
If you are running a single tenant controller, there is no need to specify the account name.