use private ssh key if allowed