filtering proxy for ssh-agent meant to be forwarded to untrusted servers