when a key is configured to be only used with confirmation, vxconnectbot (1.7.1-29) asks before using it in a vxconnectbot terminal session, but not when a third party app (eg agit) uses the key.
settings for other apps should be as strict as settings for internal use.
(if this is implemented, the confirmation dialog might also display the name of the requesting app and offer remembering, like some su implementations do, but a plain confirmation would be a good start.)
when a key is configured to be only used with confirmation, vxconnectbot (1.7.1-29) asks before using it in a vxconnectbot terminal session, but not when a third party app (eg agit) uses the key.
settings for other apps should be as strict as settings for internal use.
(if this is implemented, the confirmation dialog might also display the name of the requesting app and offer remembering, like some
suimplementations do, but a plain confirmation would be a good start.)for context, this was brought up in https://github.com/sheimi/SGit/issues/82, discussing whether sgit should use vxconnectbot as ssh agent.