Add Bash 3.2 compatibility constraint (macOS ships ancient bash), add config backup before applying changes, preserve ssh-keygen stderr during FIDO2 key generation, verify key file before enabling signing in -y mode. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>