profile: use keychain instead of ssh-agent