It's literately TWO shell commands? One for generating the key in the secure enclave and one for adding it to ssh-agent?