* Refuse SSH JWT auth when the client changes the user name between auth requests on one connection
* Run SSH sessions and SFTP as the OS user that was authorized, taken from the connection context
* Bound the SSH session request queue by bytes and stop resizes reaching a loop with no consumer
* Give the window change drain loop a body
* Avoid an empty case clause in the SSH request filter
* Charge only the newest resize to the request queue and classify requests before the byte limit
Viktor Liu