diff --git a/dom0/etc/qubes/policy.d/50-ssh.policy b/dom0/etc/qubes/policy.d/50-ssh.policy
new file mode 100644
index 0000000..58c2bc9
--- /dev/null
+++ b/dom0/etc/qubes/policy.d/50-ssh.policy
@@ -0,0 +1 @@
+ques.SshAgent * @anyvm @anym ask target=vault