visual logging of granted signatures

as with ssh-askpass, this defers the actual user interaction to an
external program, but in a more ad-hoc fashion. (notifyhelper will
always be specific to ssh-agent-filter, and might changes its arguments
to match the signature of notify).