openssh-service: only allow user 'bfo' to login