agent: Keep CAP_DAC_OVERRIDE to connect to ssh-agent socket