Extend firewalling doc to talk about restricted ssh (rt#6881)