How do I create a new user which has no capabilities? For instance, they should not be able to run any commands or view any directories (except for their home directory if necessary).
The only purpose of this user is to allow Machine1 to create a ssh connection to newlimiteduser@Machine2 (the machine with this limited new user), and then Machine2 can create a ssh connection back to Machine1 using the previously established ssh as a tunnel.