From 05dfb058c522f66240b9f7fac4940c4c9512af0b Mon Sep 17 00:00:00 2001
From: Geremia Taglialatela <tagliala.dev@gmail.com>
Date: Wed, 15 Jul 2026 10:45:40 +0200
Subject: [PATCH] Opt-in for MFA requirement

Make the gem more secure by requiring that all privileged operations by
any of the owners require OTP.

Ref capistrano/capistrano#2189
---
 sshkit.gemspec | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sshkit.gemspec b/sshkit.gemspec
index 7c195e51..343c05c5 100644
--- a/sshkit.gemspec
+++ b/sshkit.gemspec
@@ -10,7 +10,8 @@ Gem::Specification.new do |gem|
   gem.homepage      = "http://github.com/capistrano/sshkit"
   gem.license       = "MIT"
   gem.metadata      = {
-    "changelog_uri" => "https://github.com/capistrano/sshkit/releases"
+    "changelog_uri" => "https://github.com/capistrano/sshkit/releases",
+    "rubygems_mfa_required" => "true"
   }
 
   gem.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }