Setting up fingerprint / password authentication via secretive for ssh key access made me realize how often these tools try to do something without explicitly asking