added support for ssh agent forwarding during provisioning

This is a dirty little trick to make access to private github repositories (or
anything else secured using ssh keys) possible. I totally dislike this stuff,
but don't currently know how to handle that any better. Suggestions are
welcome!