Add `IdentitiesOnly yes`

Only use the identity files specified by the `IdentityFile`, not _every_
key loaded in the ssh-agent. [1]

[1]: http://linux.die.net/man/5/ssh_config#IdentitiesOnly