{ lib, ... }:
{
  programs.ssh.matchBlocks."*" = {
    forwardAgent = lib.mkDefault false;
  };
}