That's correct. And ssh-agent doesn't give access to the private key either, only to perform operations like signing. The only way to extract the key is to sear

That's correct. And ssh-agent doesn't give access to the private key either, only to perform operations like signing. The only way to extract the key is to search it in the process memory, which I believe would requires root level access.