PasswordAuthentication yes
PubkeyAuthentication yes
+# Use only authentication identity files configured in ~/.ssh/config even if
+# ssh-agent offers more identities.
+ IdentitiesOnly yes
+
# Bind local forwardings to loopback only. This way no remote hosts can access
# them (default).
GatewayPorts no