sudo should preserve SSH_AUTH_SOCK