On Tue, 8 Aug 2000, Michael van Elst wrote:
The protection only helps against network sniffers but not against someone getting access to the scripts.
ssh-agent might help... keep an encrypted private key on disk, but have the unencrypted version in ssh-agent's memory space. You'd have to manually restart the authentication agent if it dies or if the server reboots though.