Function consent_for_ssh 

pub(crate) async fn consent_for_ssh(
    state: &AppState,
    agent_block_id: &str,
    agent_id: &str,
    connection: &str,
    what: &str,
) -> Result<(), String>

The user’s consent for the agent agent_id (verified, verified_agent) in agent_block_id to run what on the SSH connection with the user’s identity (spec §8.2). connection is the canonical name (ConnTarget::name), so one host is one consent however it is spelled. “Always” for that agent and host is remembered (remote::agent_access) and asks nothing again; otherwise the user is asked (ask_user).