disable checking known hosts while backing up env; use context manager setting to set fabric env variables
no known_hosts to upload
private key of @guard backup on env config dir
container need not ssh-auth-sock