cfg/templates/sudo/ssh-auth-sock.sudoers

{% if sudo.use_pam_ssh_agent -%}
Defaults   env_keep += "SSH_AUTH_SOCK"
{% endif -%}