This is now fixed in both trunk and forrest_07_branch http://issues.apache.org/jira/browse/FOR-818 The deploy.scp workstage now uses keyfile/passphrase in preference, then fallback to remote password.
Also updated the doc at http://forrest.apache.org/tools/forrestbot.html -David
