Hello,

I'm frequent user of ssh jump hosts, proxy commands and 'scp -3' I have a problem with all of those when ssh/scp askes me for a password. I'm mostly not sure who and where is authenticating. I just get a plain "Password: " prompt. I normally increase verbose to workaround it. However, using debug is not a real fix.

It is even harder to know when I use control master. I don't know if it is using an existing control master, skipping the "Password: " step, or if it is asking for the password to create a new control master. I could be typing a password for the first server and sending it to a second one.
If that second server is malicious, it might be able to use that password (intended for the first server) to grab sensitive information.

Please, add a optional way to always prefix Password prompt with "user@host", just like "password" authentication method already does for every method that asks for a password.