constrain rsync