The --restrict-paths argument to 'attic serve' is a pretty important piece of the program, since it allows you to automate your backups without leave a full-access unencrypted SSH key lying around.

We should really mention it on the website.