How come every ssh connection goes via a proxy user? Isn't that masking the accounting? Or am I misreading it? https://dataswamp.org/~solene/2023-12-31-hardene

How come every ssh connection goes via a proxy user? Isn't that masking the accounting? Or am I misreading it? https://dataswamp.org/~solene/2023-12-31-hardened-openbsd-workstation.html#_SSH https://dataswamp.org/~solene/2023-12-31-hardened-openbsd-wo... edit: oh, it's for outbound ssh, but I'm still none the wiser in terms of auditing (or what that would do to git clones without some modification)