A ssh praetorian (bouncer, minder or whatever) ; it's just a restricted command script.