[the8472]

Agent forwarding has its own security issues, you're exposing all your credentials to the remote.

It's better to configure jump hosts in your local ssh config.

[rfoo]

There's SSH agent restriction now.

[1] https://www.openssh.com/agent-restrict.html