diff --git a/roles/dbscripts/templates/authorized_keys-group.j2 b/roles/dbscripts/templates/authorized_keys-group.j2
index 236ddae0d3c3ca3e9f9e1ce7319e576d3c2da7a6..cf9887de5f12b493b49fb55e620ab1e054b95f81 100644
--- a/roles/dbscripts/templates/authorized_keys-group.j2
+++ b/roles/dbscripts/templates/authorized_keys-group.j2
@@ -5,7 +5,7 @@
             {% set keys = lookup('file', '../pubkeys/'+user+'.pub').split("\n") %}
             {% for key in keys | sort %}
                 {% if "command" not in key -%}
-                    command="/usr/bin/svnserve --tunnel-user={{user}} -t",no-port-forwarding,no-agent-forwarding,no-pty {{key}}
+                    command="/usr/bin/svnserve --tunnel-user={{user}} -t",restrict {{key}}
                 {% endif %}
             {% endfor %}
         {% endif %}