sshd_config: fix privilege separation for XenServer.