[debian8] take oar from sid
[debian8] forbid user ssh to node