set $SSH_AUTH_SOCK and make known_hosts writable