http://serverfault.com/questions/334448/why-is-ssh-password-authentication-a-security-risk?rq=1
##Specify what commands/hosts the key can use
command="/usr/local/bin/your_backup_script.sh", ssh-rsa auiosfSAFfAFDFJL1234214DFAfDFa...
would allow only the command /usr/local/bin/your_backup_script.sh with that particular key.
from="yourclient,yourotherclient", ssh-rsa auiosfSAFfAFDFJL1234214DFAfDFa...
specify the allowed hosts for the key