add headers in authorized_keys and .forward files