TrustedUserCAKeys /etc/ssh/user_ca_key.pub Match User {{ backup_share_user }} AuthorizedPrincipalsFile /etc/ssh/backup_principals ChrootDirectory /kvm/data ForceCommand internal-sftp AllowTcpForwarding no X11Forwarding no