I don't think that function is used other than for logging. https://github.com/openssh/openssh-portable/blob/b52c0c2e64988277a35a955a474d944967059aeb/auth2-pub

I don't think that function is used other than for logging. https://github.com/openssh/openssh-portable/blob/b52c0c2e64988277a35a955a474d944967059aeb/auth2-pubkey.c#L975 https://github.com/openssh/openssh-portable/blob/b52c0c2e649... There the "command" variable is the result of the function you mention, but here the use is only for logging. The actual argv for the subprocess is the "av" argument which comes from first splitting and then replacing "%u" etc.