So, if there was forgotten code in OpenSSH (which, how the fuck does that happen?), where else might there be forgotten code? Also: this is a really great exam

So, if there was forgotten code in OpenSSH (which, how the fuck does that happen?), where else might there be forgotten code? Also: this is a really great example of why you should never have undocumented features in your code.