Things are awful for this at the moment. [Was the same for docker desktop at some point.](https://rupertrutledge.com/posts/docker-sbx-s-ssh-security-i...)

Same for [devpod](https://devpod.sh/) for sshing to devcontainers. They are particularly annoying because they just dump it into your config. Use an include statement to your own file for goodness sake.

It was often not ideal in the old world. Now agents are doing everything in those boxes, it is kind of mad.

I have my own utilities now for managing these sockets and files now to deal with this stuff.