command="~/script",restrict ssh-dsa ...