internal sftp-server is needed according to https://serverfault.com/questions/354615/allow-sftp-but-disallow-ssh as we want add a user who is only able to upload files in a chroot environment