# sockets are stored in ~/.ssh (by default ControlPath is not set).
ControlPath ~/.ssh/master-%l-%h-%p-%r
+# Hash hosts in ~/.ssh/known_hosts to try to conceal the known hosts. Doesn't
+# help if the ssh hosts are stored in the shell's history file or in this file
+# as shortcut.
+ HashKnownHosts yes
+
+# Don't permit running local commands.
+ PermitLocalCommand no
+
# Don't send any environment variables.
SendEnv