http://www.debian-administration.org/article/590/OpenSSH_SFTP_chroot_with_ChrootDirectory
Match group sftponly ChrootDirectory %h X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp