How do I configure my Redhat 7.3 box so that users can scp files but not ssh into their accounts? I tried setting their shell field in /etc/passwd to /bin/false or /sbin/nologin but both approaches also denied scp access.