# allow only some users from some addresses
Match User <user>,,user> Address 10.10.0.2
PubkeyAuthentication yes
PermitRootLogin prohibit-password