This is the UNIX variant of bug 2543. Earlier, we actually got a default PRIVATE_KEY of $HOME/.ssh/id_rsa, but this no longer works, since we are shipping all variables in /opt/thinlinc/etc/tlclient.conf. We either need to extend the config system to support home dir expansion, or avoid putting PRIVATE_KEY into the global config file.