The documentation suggests that the private key is not at risk, just the agent session. I typically work from a variety of laptops that contain no sensitive da

The documentation suggests that the private key is not at risk, just the agent session. I typically work from a variety of laptops that contain no sensitive data. I log into a remote workstation in a secure environment that houses my main repositories, where I'll check out a project, develop it, and publish the code to a remote server. Since most of my transfers use rsync over ssh, or mercurial via ssh, agent forwarding comes in really handy. It's convenient, fast, and my private keys are protected adequately with passphrases, so I don't need to worry if my laptop gets stolen, since it doesn't have anything valuable on it.