SSH agent “firewall” Usage: nix-shell go build rm -f go.sock; go build; ./agentwall --backend $SSH_AUTH_SOCK In another shell: export SSH_AUTH_SOCK=$(pwd)/go.sock ssh <server_ip>