ssh-agent passphrase only when needed