3 ms·

zfs server where you can only ssh into it with 1 user, and that user cannot zfs destroy, only zfs receive