use ssh v3.14.0 - ability to specify DenyUsers in sshd_config