···3939```40404141Next, move the `knot` binary to a location owned by `root` --4242-`/usr/local/bin/knot` is a good choice:4242+`/usr/local/bin/` is a good choice. Make sure the binary itself is also owned by `root`:43434444```4545sudo mv knot /usr/local/bin/knot4646+sudo chown root:root /usr/local/bin/knot4647```47484849This is necessary because SSH `AuthorizedKeysCommand` requires [really