Made authorized keys block shell and command.

I did this so that users of the system could only create port forwards and so
that the service could not be used as a free shell account or allow remote
command execution.