code: func (h *AuthHandlers) CheckAgentForward(ctx *ServerContext) error {
  	if err := ctx.Identity.RoleSet.CheckAgentForward(ctx.Identity.Login); err != nil {
  		return trace.Wrap(err)
  	}
  
  	return nil
  }
docs: // CheckAgentForward checks if agent forwarding is allowed for the users RoleSet.