Agent forwarding would be pretty big, if it for example pushed your git credentials to the remote host.