I hadn't really taken that use case into account when I added the per-user/host/command Defaults bits. Your change looks correct to me, I'll check it in to the mercurial repo. - todd