TrustedUserCAKeys /etc/ssh/user_ca_key.pub
Match User lewis
AuthorizedPrincipalsFile /etc/ssh/lewis_principals
ChrootDirectory /kvm/data
ForceCommand internal-sftp
AllowTcpForwarding no
X11Forwarding no