Is there a way to prevent an application from using my ssh-agent keys?
I started using an application that uses ssh to access my remote server (possibly for a legitimate reason, according to the application developers, but not a good reason, according to me). I found out when the shell where I started the application from asked me for my RSA key passphrase. The first few times I didn't even know because the key was already in my ssh-agent, so the application quietly used it and ran commands on my remote server without my knowledge.
I don't want this application to use my ssh keys behind my back. I take a certain amount of risk by downloading and running an application, but beyond this risk, I take additional privacy and security precautions like using an ssh passphrase. ssh-agent seems to remove the RSA passphrase security, so that the passphrase protects me only when I'm not logged in.