use SSH_ASKPASS for encrypted private keys