use ssh agent forwarding in docs