p-s.deb: restrict slave's ssh key to only allow running piuparts-master

Signed-off-by: Andreas Beckmann <anbe@debian.org>
p-s: support empty master command

the command may be set in authorized_keys

Signed-off-by: Andreas Beckmann <anbe@debian.org>