+# NOTE: for the cleanups below, even if our shell is not the one that spawned
+# the directory, SHLVL == 1 means that it should be safe to clean it up.
+# since .zlogout isn't guaranteed to have been run in the same shell as
+# our .zprofile was (since we source it in .zshenv) it has to be done
+# like this.
+
+### gpg forward cleanup
+if [[ $SHLVL == 1 && $GNUPGHOME =~ '/.ssh_forward/\d+/*$' ]] {