1. Principals 2. Critical Options - force-command - source-address (example: "source-address 127.0.0.1,10.10.255.0/24") 3. Extensions - permit-X11-forwarding - permit-agent-forwarding - permit-port-forwarding - permit-pty - permit-user-rc