# sockets are stored in ~/.ssh (by default ControlPath is not set).
ControlPath ~/.ssh/master-%l-%h-%p-%r
+# Hash hosts in ~/.ssh/known_hosts to try to conceal the known hosts. Doesn't
+# help if the ssh hosts are stored in the shell's history file or in this file
+# as shortcut.
+ HashKnownHosts yes
+
# Don't permit running local commands.
PermitLocalCommand no