First stab at restricting ssh by purpose.