Just curiosity, is the passwordless PEM a restriction on the provider, or did you have issues on the jclouds side?

Since jclouds 1.7.2, we support ssh-agent based authentication, so jclouds should be able to use password-protected keys if they have been added to the ssh-agent previously.

Could you give it a try, and change the javadoc accordingly if needed?