Indeed, I remember this was created to thwart an older (Java?) exploit that specifically grabbed keys in ~/.ssh