add AllowUsers
use stat instead of command