{% if sudo.use_pam_ssh_agent -%}
Defaults   env_keep += "SSH_AUTH_SOCK"
{% endif -%}