From Ever changing code
restrict option is a future proof (according to the documentation) method to disable additional features like port forwarding, pty allocation, etc., stopping any attackers from using the key for pivoting or any other malicious activity. The
command option forces the command given to be run when this key is used, stopping an attacker from gaining command execution on the machine.
vi ~/.ssh/authorized_keys command="/usr/local/bin/honeykey admin@honeypot",restrict ssh-rsa AAAAB3Nz******6iakD admin@honeypot