This is a basic SSH server that:

1. only allows the user running the server to connect
2. only allows ssh key authentication (unless a password is set)
3. only runs in the foreground

it does not support user switching, pam, etc.

this is useful for letting untrusted ssh clients connect to a shell running in something like ajail

Gemini 3 and Claude wrote almost all this, but it's < 150 loc, so it's easy to review.

MIT