In my experience you also need to pass in -v "$SSH_AUTH_SOCK":"/root/$(basename $SSH_AUTH_SOCK)" -e SSH_AUTH_SOCK="/root/$(basename $SSH_AUTH_SOCK)" in order to be able to use protected keys. Judging from other issues around use on MacOS this probably isn't available without some extra work to handle Windows/Linux/MacOS use cases, though it is fairly straightforward for Linux.