add command="..." to the key line in authorized keys