set up public key with agent forwarding