[moe]

You forgot the part where you ensure that the ssh-key for [e-mail] can only be used for this particular reverse-tunnel and not to, say, login to myserver.com...