Create restricted random Linux accounts for only using SSHs socks proxy feature and nothing else.