[cma]

Github shouldn't ever make any use of -A should it?

[xmodem]

Nope. But if you -A to a malicious server it could use your key to push to github.