The ncat script will keep running qrexec even if the ssh-agent client closed the connection (verify). This means that when you ssh into a machine, a qrexec process will keep running for the duration of the session. It's not clear why ncat is doing that, and I have received reports socat will do the same.
Things to explore:
- Closing the qrexec after a response to the first request have been sent - will ssh reopen the socket?
- Add a timeout to ssh-agent. I don't like this.