Comment by rschiavone

I hope this question doesn't sound snarky, it's a legitimate concern that I want to address for myself: how do you ensure that once it ssh's to the machine, it does not execute potentially damaging commands?