add rtckey concept for root pwd, nginx user-agent and ssh-agent