Host *
    ForwardAgent no
    ForwardX11 no
    HashKnownHosts yes
    Protocol 2
    SendEnv EDITOR LANG LANGUAGE LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION TERM TZ
    # OpenSSH 6.8+ - ask all host keys from servers to known_hosts
    UpdateHostKeys yes
    # Workaround CVE-2016-0777 & CVE-0778 on OpenSSH < 7.1p2
    UseRoaming no
    VerifyHostKeyDNS yes