Full path disclosure concerns. See https://github.com/phpseclib/phpseclib/pull/287#commitcomment-5619150 . Although thinking about it I guess that wouldn't actually be an issue here since SSH is in the System directory.