added back the ssh restriction