Does ssh-keygen have an option for setting the values like force-command, no-port-forwarding, no-agent-forwarding on a supplied key?
I am thinking of the instance, when someone sends you their public key and you want to restrict the commands the key will allow.
I know those options can be changed in an editor, but I prefer the option where it can be set from the command line.
I have seen some ssh-keygen certificate options in the documentation, but I am not sure whether they apply to a public key supplied by another person.
