Disallow ssh-agent forwarding for sftponly group