Probably the usage of the ~/.ssh/id_rsa to encrypt the history should be one of the alternatives.
After running ssh-add some_key the xonsh should run without asking the key.
For community
⬇️ Please click the 👍 reaction instead of leaving a +1 or 👍 comment