Match User crypto
ForceCommand /usr/local/bin/captivecrypto
X11Forwarding no
PermitTunnel no
AllowTcpForwarding no