[jasonjayr]

As a gentle reminder, if you are forwarding your ssh-agent by default, you should connect with:

    ssh -o 'ForwardAgent no' $host

So your secure identities are not exposed to a random ssh server ...

[Aeolun]

Forwarding your agent by default (to all hosts!) sounds like a terrible idea.