turns any local shell into a path to root or to sensitive credential material

On hosts that have allowed untrusted local users during the exposure window, treat SSH host keys and locally cached credentials as potentially disclosed