At least when you use agent forwarding, your key is only exposed while you're actually connected to the machine.
At least when you use agent forwarding, your key is only exposed while you're actually connected to the machine.