```
  programs.ssh = {
    enable = true;
    matchBlocks = {
      "github.com" = lib.hm.dag.entryBefore ["*"] {
        identitiesOnly = false;
        extraOptions.IdentityAgent = "foopy";
      };
      "*" = {
        identitiesOnly = true;
      };
    };
  };
```