safe ssh/sftp chroot snippet