same order as used by ssh-add