PermitUserEnvironment HGK_*

Match User hg

AuthorizedKeysCommand /usr/local/bin/hgkeeper --repos-path=/repos authorized-keys %f

AuthorizedKeysCommandUser hg