I'm quite excited about this as a potential way to avoid the problems that once a key is added to an agent any process can then use it. It looks like this promp

I'm quite excited about this as a potential way to avoid the problems that once a key is added to an agent any process can then use it. It looks like this prompts for permission for each process that wants to use the key, but then doesn't prompt again.[1] I've tried using various tools for this but they've always been too clunky. YubiKeys work well with their requirement to be physically touched, except you continuously have to press them when using git commands (multiple times if fetching many remotes). I haven't been able to see anything about how this handles agent forwarding over SSH. Does anyone know? [1] https://developer.1password.com/docs/ssh/agent/security https://developer.1password.com/docs/ssh/agent/security