don't use X11 SSH_ASKPASS, ugh