- support Array or String when using execPlus - pass SSH_AUTH_SOCK to support ssh-agent signing - use current node binary with process.execPath - config.insecure defaults to false if undefined