Use restricted rsync (rrsync) for rsyncing between custard and cobalt