Now that I'm using agents more extensively, I'm thinking about moving my development environment to a VPS to make sure the agents don't send any important data (like my ssh keys) to my provider. Am I ...
You are not being paranoid, it is a real problem. Using @Maple is the solution.