Using –/.ssh/authorized keys to decide what the incoming connection can do