SSH Agent Restriction (new in OpenSSH 8.9)
My need for agent forwarding has almost completely vanished since `ProxyJump` was added a few years ago.  Host *.example.com
    User runlevel1
    IdentityFile ~/.ssh/id_rsa-foo
    ProxyJump foo@jump.example.com

So when I SSH to qux.example.com, it first SSHs to foo@jump.example.com then through it to runlevel1@qux.example.com and my agent is used on each individually.So there's no ssh-agent socket on the intermediate jump box.EDIT: More examples here: https://en.wikibooks.org/wiki/OpenSSH/Cookbook/Proxies_and_J...EDIT2: For folks stuck on older SSH clients, you can do this with `ProxyCommand ssh -W ...` instead (also shown in the previous link) which is actually what ProxyJump is doing under-the-hood anyhow. https://github.com/openssh/openssh-portable/blob/d9dbb5d/ssh...