Allowlisting some Bash commands is often the same as allowlisting all

Using proxies to hide secrets from Claude Code

Down the rabbit hole: Implementing SSH port forwarding over AWS Session Manager