the answer above is ok, but please don't forget to add "private_key_passphrase" key into the aforementioned configuration JSON