4 ms·

i usually just disable ssh agent forwarding globally by default, and only enable it selectively via my ~/.ssh/config