sshd use sandbox, validate config