Connect to a configured host, then run a bounded command.
Passwords are held in memory only and private-key contents are never read. Use OpenSSH config, ssh-agent, or an identity-file path.