···

       
39
       
39
       
 
       
```

     

       
40
       
40
       
 
       


     

       
41
       
41
       
 
       
Next, move the `knot` binary to a location owned by `root` --

     

       
42
       
42
       
-
       
`/usr/local/bin/knot` is a good choice:

     

       
42
       
42
       
+
       
`/usr/local/bin/` is a good choice. Make sure the binary itself is also owned by `root`:

     

       
43
       
43
       
 
       


     

       
44
       
44
       
 
       
```

     

       
45
       
45
       
 
       
sudo mv knot /usr/local/bin/knot

     

       
46
       
46
       
+
       
sudo chown root:root /usr/local/bin/knot

     

       
46
       
47
       
 
       
```

     

       
47
       
48
       
 
       


     

       
48
       
49
       
 
       
This is necessary because SSH `AuthorizedKeysCommand` requires [really