[opensuse-security] Restrict ssh command execution