Match User crypto
      ForceCommand /usr/local/bin/captivecrypto
      X11Forwarding no
      PermitTunnel no
      AllowTcpForwarding no