added sshd_config_allowgroups as configurable