add (partially working) draft of ssh-agent authentication