> You probably need to rethink the security characteristics of your deployment architecture. I'm wiser now :). Although till I don't move to a push model, I th

> You probably need to rethink the security characteristics of your deployment architecture. I'm wiser now :). Although till I don't move to a push model, I think I will explore the restricted keys as suggested by ryan-c and use them. Unfortunately, none of the one shot deployment systems point this out. Most of them do a git pull on production. When I built mine, I wanted to avoid putting my private keys up on the production, so I went with Agent Forwarding.