Commit Briefs
don't listen everywhere by default; restrict to localhost
if -b was given without a explicit host, it defaulted to listen on any address. it's not a good idea given this would allow anyone on the same network to (ab)use the ssh forwarding.
don't hardcode the ssh path
could be interesting to determine it at configure-time though