Use restrict key option with svn-{packages,community}

No functional change; the "restrict" key option is a shorthand for:

- no-agent-forwarding
- no-port-forwarding
- no-X11-forwarding
- no-pty
- no-user-rc

It was added in OpenSSH 7.2 (2016-02-29) as a convenient way to specify
an authorized key should have "all current and future key restrictions"
applied to it.

roles/dbscripts/templates/authorized_keys-group.j2

@@ -5,7 +5,7 @@
             {% set keys = lookup('file', '../pubkeys/'+user+'.pub').split("\n") %}
             {% for key in keys | sort %}
                 {% if "command" not in key -%}
-                    command="/usr/bin/svnserve --tunnel-user={{user}} -t",no-port-forwarding,no-agent-forwarding,no-pty {{key}}
+                    command="/usr/bin/svnserve --tunnel-user={{user}} -t",restrict {{key}}
                 {% endif %}
             {% endfor %}
         {% endif %}