> potentially impersonating the SSH service Assuming the remote client has authenticated the host in ~/.ssh/known_hosts and assuming your unprivileged user has

> potentially impersonating the SSH service Assuming the remote client has authenticated the host in ~/.ssh/known_hosts and assuming your unprivileged user hasn't got access to the host's private SSH keys in /etc/ssh then I'm not sure how they can really impersonate the service. On my system the private keys cannot be read by an unprivileged user. However, the trust-on-first-use model of SSH is an obvious Achilles heel.