I'm using ssh-add -c so that new ssh connections need confirmation. I'm also using ControlMaster autoask so that new ssh connections use existing connections for reduced login speed. As a result I get two confirmations for initial connections instead of one. It would be nice if the tools could give only one confirmation for both types of connections. In addition it would be nice if ssh-agent knew something about which host is being connected to and passed that to ssh-askpass.
Are you using controlpersist? I can't see a way for a double confirmation to occur otherwise.
Yes, I'm using ControlPersist 60.