These changes are okay, modulo what Garrett said. Isn't this bug also a problem in sftp/scp (which has its own glob)? Perhaps less of a problem given there will rarely (ever?) be anonymous ssh service save for very specific apps (like hg). Curious, Dan