Limit X11 forwarding over ssh to trusted connections (-Y instead of -X).