I agree... the whole point is that admin/root can do everything. SSH agent hijacking is as easy as setting the SSH_AUTH_SOCK variable to that of any logged in u

I agree... the whole point is that admin/root can do everything. SSH agent hijacking is as easy as setting the SSH_AUTH_SOCK variable to that of any logged in user. This is why enabling ssh agent forwarding is something that should be evaluated on a per connection basis. You don't want to forward the agent holding your home keys to your work machine where someone else has root access. But then again, the author didn't claim to do anything special, it was just a little demonstration.