- multiple-file known-hosts database?
- import existing stuff
- at least minimal sftp/scp support
- revoke-forwarding requests for X and agent
- fallback to external ssh1 client? server?  figure out and implement ssh1?
- handle forwarder connection loss better
- internals doc (real comments, in particular)
- per-client flags in agent
- some kind of config for agent
- "pq hold" in interactive agent
- figure out how to get a BPP to abort_bpp() (see bpp.h)
- utmp/wtmp entries (and related stuff, eg, setlogin())
- fix password/keyboard-interactive auth from sharing servers
- malloc hacks to mitigate swap-out-crypto-key risks
- handle a missing agent better
- update manpage description of config-file language
- fix "ssh -share-drop host" buglet
- tutorial config-file document
- "sharing connection read EOF" add CR after LF
- document hostkey location and file names
- external-program approval of key use (for, eg, time-based restrictions)