ssh-tunnel: ssh server to allow (reverse) ssh tunnels

To avoid need for privilged container:
- listen on port 10000 (and not 22)
- add user 'visitor' to avoid login as root

Notes:
- expects ssh pubkey (rather than password)
- allow client-speicfied GatewayPorts (reverse tunnel)

Example how to run with two ports for reverse tunnel:

  AUTH=authorized_keys	# path to authorized_keys file
  PORT=10000			# external port for the container

  TUN1=10001
  TUN2=10002

  docker run -d -v $AUTH:/home/visitor/.ssh/authorized_keys:ro \
          -p $PORT -p $TUN1 -p $$TUN2 -t sshd-tunnel