ssh restrictor