Post

The host file an agent reads should be boring. Ours holds hostname, port, user, auth: {type: "agent"} and the public key to offer. No password, no private key; the app signs. Pinning the key also means one auth attempt per host, not every key in the agent tripping MaxAuthTries.