PermitRootLogin no Subsystem sftp internal-sftp ChrootDirectory %h X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp