#  allow only some users from some addresses
Match User <user>,,user> Address 10.10.0.2
    PubkeyAuthentication yes
    PermitRootLogin prohibit-password