The nice thing about this is that, with filesystem permissions on one end and a check for SCM_CREDENTIALS or SO_PEERCRED on the other, you can effectively get u

The nice thing about this is that, with filesystem permissions on one end and a check for SCM_CREDENTIALS or SO_PEERCRED on the other, you can effectively get user-based access control working between two machines. I think this is the one remaining advantage of ssh tunnels over using a VPN. NB if you're doing this sort of thing, you probably want to add `StreamLocalBindUnlink yes` to the ssh options.