add sftp_user type

This is a special case of the sftponly_group. It creates its own group
and lets you specify a hash of users + password/sshkey that will be chrooted
to their homedirectory, currently in /home but you can override.